last executing test programs: 5m35.052679312s ago: executing program 32 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r2) 5m7.638774587s ago: executing program 33 (id=1188): rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffffffffffff9]}, 0x0, 0x8) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000006404c22d2331d2b222a0619816"], 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd79, 0x3, 0x9, 0x6, 0x2, 0x0, 0x8, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 4m21.08275024s ago: executing program 34 (id=1858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x200000, 0x1, 0x0, 0x10000000, 0x1, 0x3}, &(0x7f0000000000)={0x18, 0x7, 0x9, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5f2bca81de7afff8, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6f8, 0x3, 0x9, 0x222}, {0xff96, 0x9, 0x2, 0x6}]}) 3m28.368728303s ago: executing program 35 (id=2519): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000180)) 3m6.000005118s ago: executing program 36 (id=2899): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfe, 0x2c1, &(0x7f0000000780)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000100000906010100000000000000000a00000a05000100070000006c000880100007800c00018008000540ac141429100007800c001480080001407f0000010c000780050015007f0000001c0007801800148014000240fe800000000000000000000000000030100007800c001b400000000000000004100007800900130073797a30000000003c0007801800028014000240fe8000000000000000000000000000370c001b4000000000000002f4050003000a0000000c00168008000140ac1414bb050001000700000005000100070000000c00078008000840000000082000078005000300f000000006001a00f30000000c001b4000000000000000049c8864abc3d5f2b642d7cec15ba10f2fc8fa2d780000000092c79a4ae98a3f753a98f28688233f6f5223fca353088660e751808485ae9d60a6637995ddc4a7a1b74de9de6a2b4834cc9f8b9d199897deeff2d1ea46de5627d4c10996ee507427c1340a13af73558fdd871fda5a5123fff4c222b170eee33086a0f3bf8d4caa92def42ee21c6d21b7e18eb8748f29bf8587e7b72ecd2e803a876faa6bf232a75c2d1b96a968527f00a49d7e0064242d74d25d0da9b7d732568cb9b683b139a4ef95401ea9235f00bc886af493cbd7b2d341da9630ac2438aff328a802b22aa71a8ccdd98f8ce5098b4d3ef9f7bc672ee835928e6f4b349b81ad8c63756e2a58eca0642cd49dd09b45dd0c6d1d2da11a907af4daff06d3b75e3bf222e4d3f0847965bfeb85eda27ed545aa174f4231ef45af9b027a57b9484ed3242b116eecada5dc3ebd94f16a0e6feb83291c44561858e41a5fd4434b17514a846fba71f380d3ba7aee65267351cffdd7488c929854ae18b550fc6670a17ba0e1c2e11ce49bc16da6efaf19e8d6284cec5e21424579df80b494f8c9057c64f9"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) r5 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 2m42.114691149s ago: executing program 3 (id=3311): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x10001}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0) statx(r0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', 0x1000, 0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x2e4, 0x16, 0x4, 0x70bd27, 0x25dfdbfd, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0x5, 0xa, 0x20, 0x20, 0x2e, r4, r5}, {@in6=@remote, 0x4d6, 0x3c}, @in=@multicast2, {0x4, 0x2, 0xffffffffffffffff, 0xa, 0x1, 0x21f, 0xf3, 0x8}, {0x4, 0x5, 0x8000, 0x1}, {0x10, 0xc, 0x1c}, 0x70bd2c, 0x3502, 0x2, 0x2, 0x7, 0x21}, 0x860, 0x80}, [@migrate={0x180, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, @in=@private=0xa010101, @in=@multicast2, 0x2b, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in6=@rand_addr=' \x01\x00', 0x2b, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in=@private=0xa010101, @in=@broadcast, @in=@empty, @in6=@private2, 0xff, 0x7, 0x0, 0x3505, 0xa, 0xa}, {@in=@private=0xa010102, @in=@private=0xa010101, @in6=@private2, @in=@empty, 0x32, 0x3, 0x0, 0x0, 0x5, 0xa}, {@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0xe6, 0x4, 0x0, 0x0, 0x2, 0xa}]}, @migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@mcast1, 0x3c, 0x4, 0x0, 0x3503, 0x2, 0x2}]}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd29}}, @lastused={0xc, 0xf, 0x14f}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x8850) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x7, 0x0, 0x2}]) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/asound/timers\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000800)='./cgroup.net/cgroup.procs\x00', 0x0) accept$inet(r7, &(0x7f0000000780)={0x2, 0x0, @empty}, &(0x7f00000007c0)=0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x24048840) 2m42.031087546s ago: executing program 3 (id=3315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008090) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)}, 0x20) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="f8020000160001040000000000000000ac1414aa000000000000000000000000ac1e010100000000000000000000000000000fd100000002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000100000000000000000400000000000000000000000000000000000000000000000000000000000080010000800000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000800000000000000000000060000000004000000000000000000000a000000fc0000000000000000000000ad04000008001f000000000008000b001bc00000e4000600ff010000000000000000000000000001fc0100000000000000000000000000014e2300004e2304220200802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d22b000000fe8000000000000000000000000000aa0700000000000000070000000000000006000000000000000900000000000000ff000000000000000500000000000000ed0e000000000000090000000000000007000000000000005200000000000000ff0f0000000000000600000000000000f7ffffff080000000004000029bd700002350000020005ea00000000000000000c0015"], 0x2f8}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x8000, 0x2, 0x2, 0x2}, 0x20) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xddc, 0x4) (async, rerun: 64) r8 = dup(r5) (async, rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r9, 0x507, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x48001) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2m41.191541941s ago: executing program 3 (id=3331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigpending(0x0, 0x0) 2m41.139749905s ago: executing program 3 (id=3335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/../file0\x00'}) read(r0, &(0x7f0000000140)=""/28, 0x1c) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000580)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625c", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 2m41.070787102s ago: executing program 3 (id=3339): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060089"], 0x24}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x82, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x816ac1f4127f23eb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x86bfd5e49e7958c4, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfb7f, 0x2, 0x4, 0x4}, {0x7, 0x16, 0x5, 0x1}, {0x4, 0x2, 0x3, 0xfffffffa}, {0x1000, 0x6, 0x8, 0x5}]}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4044850, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='rxrpc_call\x00', r4}, 0x18) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x1df6, &(0x7f0000000300)={0x0, 0x7c9d, 0x80, 0x3, 0x256}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) 2m40.612989553s ago: executing program 3 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2000000004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8100, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 2m40.52459596s ago: executing program 37 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2000000004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8100, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 2m11.534820617s ago: executing program 7 (id=3808): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r6, 0x3516, 0xddd6, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 2m11.151960321s ago: executing program 1 (id=3812): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 2m11.035103311s ago: executing program 1 (id=3814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m9.878489594s ago: executing program 7 (id=3819): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x400}) 2m9.863896266s ago: executing program 1 (id=3820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigpending(0x0, 0x0) 2m9.803495451s ago: executing program 1 (id=3821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$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") r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='netlink_extack\x00', r7, 0x0, 0x7}, 0xfffffffffffffe7f) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) syz_pidfd_open(r8, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m9.729495747s ago: executing program 7 (id=3822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x7f, 0xb, 0xd3, @mcast1, @mcast1, 0x80, 0x1, 0x5, 0x4}}) 2m9.683620121s ago: executing program 1 (id=3824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000005384ee54d2b30b36dfa0a50000000000950000000000000015bbddcfda56afcd25dae26181626a3220f2c401959a9e0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000011) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 2m9.681157122s ago: executing program 7 (id=3825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$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") r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='netlink_extack\x00', r7, 0x0, 0x7}, 0xfffffffffffffe7f) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) syz_pidfd_open(r8, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m9.388671338s ago: executing program 7 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$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") r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 2m8.081937235s ago: executing program 1 (id=3840): ioprio_set$uid(0x3, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) (async) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x30) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) 2m8.039043608s ago: executing program 6 (id=3841): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x8, 0x83, "00000000000000000000ffff00"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000140), 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_emit_ethernet(0x227, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd67e8977c01f188"], 0x0) 2m8.038409538s ago: executing program 38 (id=3840): ioprio_set$uid(0x3, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) (async) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x30) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) 2m7.751046874s ago: executing program 7 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2}) 2m7.750713684s ago: executing program 39 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2}) 2m7.162004147s ago: executing program 6 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 2m7.161165916s ago: executing program 6 (id=3851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000005384ee54d2b30b36dfa0a50000000000950000000000000015bbddcfda56afcd25dae26181626a3220f2c401959a9e0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000011) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 2m6.285488995s ago: executing program 6 (id=3859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='netlink_extack\x00', r7, 0x0, 0x7}, 0xfffffffffffffe7f) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_pidfd_open(r8, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m6.011260389s ago: executing program 6 (id=3861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000004b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='console\x00', r3}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x50) r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'vlan1\x00', 0x100}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 2m4.631132702s ago: executing program 6 (id=3869): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) io_cancel(0x0, 0x0, 0x0) 2m4.630836802s ago: executing program 40 (id=3869): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) io_cancel(0x0, 0x0, 0x0) 1m59.319485416s ago: executing program 9 (id=3932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 1m59.180124348s ago: executing program 9 (id=3934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14a2a4f499140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000800000000000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f34001280200001800a00010071756f7461000000100002800c0001400000000000000009100001800700010063740000040002800800034000000106140000001000010000000000000000000084000a"], 0xc0}}, 0x20050800) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) recvmmsg$unix(r2, &(0x7f0000004440)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/251, 0xfb}, {&(0x7f0000001700)=""/2, 0x2}, {&(0x7f0000001740)=""/72, 0x48}], 0x4, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001980)=""/225, 0xe1}, {&(0x7f0000001a80)=""/161, 0xa1}, {&(0x7f0000001b40)=""/181, 0xb5}, {&(0x7f0000001c00)=""/255, 0xff}, {&(0x7f0000001d00)=""/139, 0x8b}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/24, 0x18}, {&(0x7f0000002e00)=""/38, 0x26}], 0x8, &(0x7f0000002ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002f40)=""/228, 0xe4}, {&(0x7f0000003040)=""/105, 0x69}, {&(0x7f00000030c0)=""/209, 0xd1}, {&(0x7f00000031c0)=""/118, 0x76}, {&(0x7f0000003240)=""/20, 0x14}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/36, 0x24}], 0x7, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003480)=""/221, 0xdd}, {&(0x7f0000003580)=""/202, 0xca}], 0x2, &(0x7f00000036c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003800)=""/72, 0x48}, {&(0x7f0000003880)=""/250, 0xfa}, {&(0x7f0000003980)=""/96, 0x60}, {&(0x7f0000003a00)=""/143, 0x8f}, {&(0x7f0000003ac0)=""/45, 0x2d}], 0x5, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003c80)=""/163, 0xa3}, {&(0x7f0000003d40)=""/192, 0xc0}, {&(0x7f0000003e00)=""/112, 0x70}], 0x3, &(0x7f0000003ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000004080)=[{&(0x7f0000003f80)=""/35, 0x23}, {&(0x7f0000003fc0)=""/169, 0xa9}], 0x2}}, {{&(0x7f00000040c0)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000004680)=""/202, 0xca}, {&(0x7f0000004240)=""/89, 0x59}], 0x2, &(0x7f0000004300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x9, 0x1, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) 1m58.882988885s ago: executing program 9 (id=3935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r6, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006008848"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100020c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) 1m58.804658102s ago: executing program 9 (id=3936): fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m58.647186596s ago: executing program 9 (id=3938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}, @ip_retopts={{0x10}}], 0x28}, 0x4004840) 1m58.395181489s ago: executing program 9 (id=3944): r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1m58.394718149s ago: executing program 41 (id=3944): r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4.010514002s ago: executing program 8 (id=4975): getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 3.943150648s ago: executing program 8 (id=4976): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x801070cf, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") (async) truncate(&(0x7f0000000200)='./file2\x00', 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r3, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r3, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) (async) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000008009500002000000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) 3.942784828s ago: executing program 8 (id=4978): r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r1, &(0x7f00000001c0)=""/43, 0x2b) getdents64(r1, 0xfffffffffffffffe, 0x64) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 3.109694313s ago: executing program 8 (id=4994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) 3.104960523s ago: executing program 8 (id=4996): socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0xb67e, 0x8, 0x8001002, 0x3d7}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x8) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) fcntl$lock(r3, 0x0, &(0x7f00000003c0)={0x1, 0x0, 0xcf, 0x6f1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x4008004}, 0x40004) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f0000000300)={0xf8, 0x40}) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000000700000000000"], 0x10}}, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x0) getdents64(r10, 0x0, 0x10) 2.170865776s ago: executing program 4 (id=5004): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xbc, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x48090) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fea258bc37372fde270000000c00060001000000010000000c002d80"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.995052572s ago: executing program 0 (id=5005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000005384ee54d2b30b36dfa0a50000000000950000000000000015bbddcfda56afcd25dae26181626a3220f2c401959a9e0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000011) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000180)='suspend_resume\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_usbip_server_init(0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000100)=[0x1, 0x1b4d], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1.994835562s ago: executing program 4 (id=5006): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0xfffe, &(0x7f00000002c0)) 1.994751602s ago: executing program 4 (id=5007): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.985213813s ago: executing program 4 (id=5008): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 1.943290077s ago: executing program 4 (id=5010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000005384ee54d2b30b36dfa0a50000000000950000000000000015bbddcfda56afcd25dae26181626a3220f2c401959a9e0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000011) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000180)='suspend_resume\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_usbip_server_init(0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000100)=[0x1, 0x1b4d], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1.880738652s ago: executing program 5 (id=5012): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) listen(0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x20}, 0x18) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0xc49, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) msgsnd(0x0, &(0x7f0000000e00)={0x1, "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"}, 0xfee, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7ff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x44080) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="05002f"], 0x2c}}, 0x80) 1.804401209s ago: executing program 5 (id=5013): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2800, 0xe) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001280), &(0x7f00000012c0)=0x30) mlockall(0x7) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffffa) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000001300)=0x2, 0x9, 0x4) mkdir(&(0x7f0000001340)='./file0\x00', 0x62) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x4, 0xfffffffffffff801, 0xffffffffffff7ffd}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0xffffffffffffff27}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4d, 0xffff0249, 0xf4, 0x46, 0xb, 0xb, 0x8, 0x6, 0x30, 0x7, [0x1, 0x8d06, 0xf72, 0x5, 0x400, 0x0, 0x1, 0xff]}}) 1.649205903s ago: executing program 5 (id=5014): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0) 1.598816127s ago: executing program 5 (id=5015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc7) sendmsg$IPSET_CMD_DEL(r1, 0x0, 0x20040011) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.552711691s ago: executing program 5 (id=5016): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 578.787948ms ago: executing program 0 (id=5021): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sync_file_range(r1, 0x8, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000fc0)=ANY=[], 0xe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x8, &(0x7f0000002500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x96, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') 571.583249ms ago: executing program 5 (id=5022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xa0b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x404043000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x68, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x401, 0x4, {{0x21, 0x4, 0x1, 0x36, 0x84, 0x64, 0x0, 0x80, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0xd1, 0x3, 0x2, [{@private=0xa010101, 0x8e1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2}, {@private=0xa010102, 0x4}, {@empty, 0x2}, {@empty, 0x10000}, {@loopback, 0x9}]}, @ssrr={0x89, 0x1f, 0x5a, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @loopback]}, @ssrr={0x89, 0xb, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r10, 0x1, 0xd8, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x8, 0x8, {{0x1d, 0x4, 0x0, 0x9, 0x74, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0x54, 0x40, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@multicast1, 0x40}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1000}, {@empty, 0x8d}, {@empty, 0xfffffc01}, {@broadcast, 0x25f080}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0x3}, {@multicast2, 0x5}, {@loopback, 0x7}]}, @rr={0x7, 0xb, 0x50, [@broadcast, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)={0xb0, 0x0, 0x400, 0x70bd27, 0x5, {}, [@ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44080}, 0x20000041) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r13 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r13, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) unshare(0x66020000) 511.400054ms ago: executing program 4 (id=5023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000005384ee54d2b30b36dfa0a50000000000950000000000000015bbddcfda56afcd25dae26181626a3220f2c401959a9e0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000180)='suspend_resume\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_usbip_server_init(0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000100)=[0x1, 0x1b4d], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 243.112378ms ago: executing program 0 (id=5025): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0) 242.528598ms ago: executing program 0 (id=5026): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES32, @ANYRESHEX], 0x4c}, 0x1, 0xffffffff00000003}, 0xc4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffbfb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) close_range(r2, 0xffffffffffffffff, 0x0) 211.057821ms ago: executing program 8 (id=5027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000640)='kmem_cache_free\x00', r1, 0x0, 0x89d1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x5, 0x7, 0x5, 0x7bba}, {0xfffe, 0x80, 0x63, 0x3}, {0xc3a1, 0x2c, 0x0, 0x6}, {0x9, 0x10, 0x6, 0x7f}, {0x0, 0x0, 0x53, 0x6}]}) write(r6, &(0x7f0000000600)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) 182.841504ms ago: executing program 2 (id=5028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 172.367685ms ago: executing program 0 (id=5029): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES32, @ANYRESHEX], 0x4c}, 0x1, 0xffffffff00000003}, 0xc4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffbfb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) close_range(r2, 0xffffffffffffffff, 0x0) 153.204336ms ago: executing program 2 (id=5030): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0) 120.856309ms ago: executing program 0 (id=5031): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0xff00, 0x400c0, &(0x7f00000001c0)={0xa, 0xcaa1, 0x0, @loopback, 0x200000c}, 0x1c) 90.535452ms ago: executing program 2 (id=5032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback={0x1000000}, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", '\x00\x00\x00\b\x00\x00\x00\x00@\x00', '\x00', "ba0200"}, 0x28) 40.961876ms ago: executing program 2 (id=5033): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 618.11µs ago: executing program 2 (id=5034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc7) sendmsg$IPSET_CMD_DEL(r1, 0x0, 0x20040011) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 0s ago: executing program 2 (id=5035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r9}, 0x55) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000030000001c0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x3a8, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x394, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x874}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xde2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "543ffd7a753fe8c748d0f85d27854809e2e485332f59bbfabe930415b96c0a06053b1beb6910079d8779b2e7cc313388fbe2574df7e672826355b255ab60553436bb0598b9854f7c835a33424bbcf52ba2946c03a36125771852af5604b3bc3016fbf54c8166621c945b6750e914c65c1f457d735c0ef8e54000cabeb9a61068b8d985ca6a8053cfb4b7d98455f0766794e2964d16ce36fba1ab7bc5664fad0d970b44b9cec4e1459b7f31f968a42e38540bdebaddd9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xed, 0x5, "b83ca010b4305a3459d9ee106ffd2688369225822eea96d56695cdda10df1b075bacc95ec7f7f3058896dcca37c140226d972b37ea99e95358a3653c3e659d8df4a00df000dc6fa68392d9ea123cfc242ce47a0721ba8ef95d79adffc2cfc0e6c3194c5e853fdc78f97c09943723b6bcab2ab9613419f62493adc783559e37cc7281eea7638847a69fa7b9217d376f17b0650388ee10d2f126c4620618ca6083e57576b50a89af7e0f78a9da20c910abb83afaf538b6517febaccbe9db63f5c6f08fc36ed23dfd174d3bd4e1e162a46d7af11a59778e51229ddb326126c92acf3e12585c06408a61e3"}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "71e12592f505df6d1d7b9b2fa200378ecf1a09af270a1c805165b7405558a9b37a7a0daa8c3fe9f107999c652e1369f7b2f30365e5a7903c55c23ddd420faf29631acf620ba44481008cbbaa5de91b5962609992cb7af19fc9f237f1cd5d727cb17342913d190634bf1156f4584c35f80a90a913b2f99df127fc7cb69245768d8c6a6ec0a27cb6c0e8c791a1861a7aeb172bc2a931e5e15062a4c62e419b5fec4b463ea5ef809086eaf74f7d6f75bc35ea8df04dcad1be082f18ab0d6ce8fd"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%--\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '.]}@%$$-^[.&([\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')@/\x96(@$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom$llc(r2, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)={0x2, 0xb6, "01cefb55499e8a88a47433bac0e8d698a6d50341ab779ee21726a5ac7ddc7d743f336ec8cd7d05ef2cb07f7316331207f7a120d380fcee4b32b8fc280ad03f88b9afc0c238f839d25dbd165ba7c01bd490487cf4071a977aa1710ad9226ae2d7f6b76d41f931f2571a3fd87fecb7357dafd4e9d313f879c00fe0f4a232035c64fc78fc36743103b4b8a0ebcb1560db7fdef9de7c33b163a2b93c0c544ebc26d0a25d08235b346131c1b3c16788d7d4d6d3027474dfb6"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_usbip_server_init(0x2) kernel console output (not intermixed with test programs): 3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9aeeb1e3aa code=0x7ffc0000 [ 317.482605][ T29] audit: type=1326 audit(1767761694.477:20172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 317.855189][T17093] loop8: detected capacity change from 0 to 128 [ 317.904242][T17097] loop8: detected capacity change from 0 to 512 [ 317.915484][T17097] EXT4-fs: inline encryption not supported [ 317.926469][T17097] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.948186][T17097] EXT4-fs (loop8): orphan cleanup on readonly fs [ 317.960164][T17097] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.4473: Allocating blocks 41-42 which overlap fs metadata [ 317.980803][T17097] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.4473: Allocating blocks 41-42 which overlap fs metadata [ 317.995404][T17097] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4473: Failed to acquire dquot type 1 [ 318.007666][T17097] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 318.022442][T17097] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4473: corrupted inode contents [ 318.034503][T17095] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 318.041110][T17095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.048658][T17095] vhci_hcd vhci_hcd.0: Device attached [ 318.054332][T17097] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.4473: mark_inode_dirty error [ 318.073491][T17097] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4473: corrupted inode contents [ 318.095219][T17087] serio: Serial port ttyS3 [ 318.099206][T17097] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.4473: mark_inode_dirty error [ 318.123881][T17097] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4473: corrupted inode contents [ 318.149155][T17097] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 318.173612][T17097] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4473: corrupted inode contents [ 318.203828][T17097] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.4473: mark_inode_dirty error [ 318.241995][T17097] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 318.266454][T17097] EXT4-fs (loop8): 1 truncate cleaned up [ 318.300723][T17097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.300865][T17086] syz.0.4469 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 318.327306][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.0.4469 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 318.327377][T17086] Tainted: [W]=WARN [ 318.327387][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.327402][T17086] Call Trace: [ 318.327409][T17086] [ 318.327418][T17086] __dump_stack+0x1d/0x30 [ 318.327446][T17086] dump_stack_lvl+0x95/0xd0 [ 318.327495][T17086] dump_stack+0x15/0x1b [ 318.327512][T17086] dump_header+0x81/0x240 [ 318.327534][T17086] oom_kill_process+0x295/0x350 [ 318.327561][T17086] out_of_memory+0x97b/0xb80 [ 318.327588][T17086] try_charge_memcg+0x610/0xa10 [ 318.327692][T17086] obj_cgroup_charge_pages+0xa6/0x150 [ 318.327782][T17086] __memcg_kmem_charge_page+0x9f/0x170 [ 318.327817][T17086] __alloc_frozen_pages_noprof+0x18f/0x360 [ 318.327905][T17086] alloc_pages_mpol+0xb3/0x260 [ 318.327998][T17086] alloc_pages_noprof+0x90/0x130 [ 318.328075][T17086] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 318.328193][T17086] __kvmalloc_node_noprof+0x492/0x6b0 [ 318.328224][T17086] ? ip_set_alloc+0x24/0x30 [ 318.328254][T17086] ? ip_set_alloc+0x24/0x30 [ 318.328284][T17086] ? __slab_alloc+0x25/0x50 [ 318.328328][T17086] ip_set_alloc+0x24/0x30 [ 318.328418][T17086] hash_netiface_create+0x282/0x740 [ 318.328579][T17086] ? __pfx_hash_netiface_create+0x10/0x10 [ 318.328628][T17086] ip_set_create+0x3cc/0x970 [ 318.328676][T17086] ? __nla_parse+0x40/0x60 [ 318.328709][T17086] nfnetlink_rcv_msg+0x4c6/0x590 [ 318.328762][T17086] netlink_rcv_skb+0x123/0x220 [ 318.328795][T17086] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 318.328896][T17086] nfnetlink_rcv+0x167/0x16c0 [ 318.328929][T17086] ? kmem_cache_free+0xe3/0x3a0 [ 318.328958][T17086] ? __kfree_skb+0x109/0x150 [ 318.329034][T17086] ? nlmon_xmit+0x4f/0x60 [ 318.329057][T17086] ? consume_skb+0x49/0x150 [ 318.329162][T17086] ? nlmon_xmit+0x4f/0x60 [ 318.329183][T17086] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 318.329218][T17086] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 318.329249][T17086] ? __dev_queue_xmit+0x148/0x1ee0 [ 318.329293][T17086] ? ref_tracker_free+0x37d/0x3e0 [ 318.329363][T17086] ? __netlink_deliver_tap+0x4dc/0x500 [ 318.329394][T17086] netlink_unicast+0x5c0/0x690 [ 318.329422][T17086] netlink_sendmsg+0x58b/0x6b0 [ 318.329644][T17086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.329674][T17086] __sock_sendmsg+0x145/0x180 [ 318.329691][T17086] ____sys_sendmsg+0x31e/0x4a0 [ 318.329845][T17086] ___sys_sendmsg+0x17b/0x1d0 [ 318.329893][T17086] __x64_sys_sendmsg+0xd4/0x160 [ 318.329935][T17086] x64_sys_call+0x17ba/0x3000 [ 318.330075][T17086] do_syscall_64+0xca/0x2b0 [ 318.330182][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.330202][T17086] RIP: 0033:0x7ff846fcf749 [ 318.330216][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.330233][T17086] RSP: 002b:00007ff845a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.330285][T17086] RAX: ffffffffffffffda RBX: 00007ff847225fa0 RCX: 00007ff846fcf749 [ 318.330299][T17086] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 318.330312][T17086] RBP: 00007ff847053f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.330323][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.330334][T17086] R13: 00007ff847226038 R14: 00007ff847225fa0 R15: 00007ffeedb7dbc8 [ 318.330352][T17086] [ 318.661145][T17086] memory: usage 307196kB, limit 307200kB, failcnt 1048 [ 318.668235][T17086] memory+swap: usage 308068kB, limit 9007199254740988kB, failcnt 0 [ 318.676224][T17086] kmem: usage 302564kB, limit 9007199254740988kB, failcnt 0 [ 318.683540][T17086] Memory cgroup stats for /syz0: [ 318.699525][T17099] vhci_hcd: connection closed [ 318.714556][ T6359] vhci_hcd vhci_hcd.5: stop threads [ 318.724622][ T6359] vhci_hcd vhci_hcd.5: release socket [ 318.730315][ T6359] vhci_hcd vhci_hcd.5: disconnect device [ 318.739480][T17097] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.740823][T17086] cache 4194304 [ 318.752803][T17086] rss 8192 [ 318.755832][T17086] shmem 4194304 [ 318.759361][T17086] mapped_file 3153920 [ 318.763346][T17086] dirty 0 [ 318.766284][T17086] writeback 16384 [ 318.769986][T17086] workingset_refault_anon 956 [ 318.774665][T17086] workingset_refault_file 664 [ 318.776198][ T3486] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 318.779449][T17086] swap 880640 [ 318.788375][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.790097][T17086] swapcached 36864 [ 318.802758][T17086] pgpgin 422647 [ 318.806238][T17086] pgpgout 421486 [ 318.809234][ T3486] usb 11-1: enqueue for inactive port 0 [ 318.809795][T17086] pgfault 494739 [ 318.818904][T17086] pgmajfault 199 [ 318.822458][T17086] inactive_anon 290816 [ 318.826556][T17086] active_anon 8192 [ 318.830288][T17086] inactive_file 0 [ 318.833987][T17086] active_file 0 [ 318.837444][T17086] unevictable 4194304 [ 318.839037][ T3486] usb 11-1: enqueue for inactive port 0 [ 318.841420][T17086] hierarchical_memory_limit 314572800 [ 318.852399][T17086] hierarchical_memsw_limit 9223372036854771712 [ 318.858551][T17086] total_cache 4194304 [ 318.862575][T17086] total_rss 8192 [ 318.866233][T17086] total_shmem 4194304 [ 318.870234][T17086] total_mapped_file 3153920 [ 318.874761][T17086] total_dirty 0 [ 318.878228][T17086] total_writeback 16384 [ 318.878946][ T3486] usb 11-1: enqueue for inactive port 0 [ 318.882429][T17086] total_workingset_refault_anon 956 [ 318.893221][T17086] total_workingset_refault_file 664 [ 318.898431][T17086] total_swap 880640 [ 318.902301][T17086] total_swapcached 36864 [ 318.906566][T17086] total_pgpgin 422647 [ 318.910588][T17086] total_pgpgout 421486 [ 318.914676][T17086] total_pgfault 494739 [ 318.918749][T17086] total_pgmajfault 199 [ 318.922841][T17086] total_inactive_anon 290816 [ 318.927438][T17086] total_active_anon 8192 [ 318.931750][T17086] total_inactive_file 0 [ 318.935910][T17086] total_active_file 0 [ 318.940010][T17086] total_unevictable 4194304 [ 318.944511][T17086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4105,pid=16035,uid=0 [ 318.959298][T17086] Memory cgroup out of memory: Killed process 16035 (syz.0.4105) total-vm:93340kB, anon-rss:1164kB, file-rss:23816kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 318.994750][ T3486] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 319.015717][T17097] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.072542][T17097] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.130079][T17097] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.183480][ T6322] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.210296][ T6322] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.222514][T17127] FAULT_INJECTION: forcing a failure. [ 319.222514][T17127] name failslab, interval 1, probability 0, space 0, times 0 [ 319.235277][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.2.4483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 319.235299][ T6322] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.235310][T17127] Tainted: [W]=WARN [ 319.235317][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.235416][T17127] Call Trace: [ 319.235439][T17127] [ 319.235464][T17127] __dump_stack+0x1d/0x30 [ 319.235540][T17127] dump_stack_lvl+0x95/0xd0 [ 319.235602][T17127] dump_stack+0x15/0x1b [ 319.235657][T17127] should_fail_ex+0x265/0x280 [ 319.235744][T17127] should_failslab+0x8c/0xb0 [ 319.235805][T17127] __kmalloc_noprof+0xb9/0x5a0 [ 319.235870][T17127] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 319.235941][T17127] usb_hcd_submit_urb+0x5d3/0x1200 [ 319.236080][T17127] usb_submit_urb+0xaa3/0xbb0 [ 319.236161][T17127] usbfs_start_wait_urb+0x95/0x1c0 [ 319.236256][T17127] do_proc_control+0x628/0x8b0 [ 319.236357][T17127] proc_control+0x71/0xa0 [ 319.236427][T17127] usbdev_ioctl+0x93c/0x1700 [ 319.236510][T17127] ? __pfx_usbdev_ioctl+0x10/0x10 [ 319.236581][T17127] __se_sys_ioctl+0xce/0x140 [ 319.236669][T17127] __x64_sys_ioctl+0x43/0x50 [ 319.236766][T17127] x64_sys_call+0x14b0/0x3000 [ 319.236852][T17127] do_syscall_64+0xca/0x2b0 [ 319.236960][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.237021][T17127] RIP: 0033:0x7f9aeeb1f749 [ 319.237126][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.237177][T17127] RSP: 002b:00007f9aed587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.237253][T17127] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1f749 [ 319.237314][T17127] RDX: 0000200000000280 RSI: 00000000c0185500 RDI: 0000000000000006 [ 319.237349][T17127] RBP: 00007f9aed587090 R08: 0000000000000000 R09: 0000000000000000 [ 319.237365][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.237376][T17127] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 319.237392][T17127] [ 319.277940][ T6322] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.450287][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.053658][T17183] FAULT_INJECTION: forcing a failure. [ 320.053658][T17183] name failslab, interval 1, probability 0, space 0, times 0 [ 320.066499][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.0.4505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.066545][T17183] Tainted: [W]=WARN [ 320.066551][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.066611][T17183] Call Trace: [ 320.066618][T17183] [ 320.066626][T17183] __dump_stack+0x1d/0x30 [ 320.066665][T17183] dump_stack_lvl+0x95/0xd0 [ 320.066684][T17183] dump_stack+0x15/0x1b [ 320.066750][T17183] should_fail_ex+0x265/0x280 [ 320.066775][T17183] should_failslab+0x8c/0xb0 [ 320.066794][T17183] __kmalloc_cache_noprof+0x65/0x4c0 [ 320.066822][T17183] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 320.066873][T17183] ? mutex_unlock+0x4f/0x90 [ 320.066903][T17183] __se_sys_memfd_create+0x1d6/0x6b0 [ 320.066973][T17183] __x64_sys_memfd_create+0x31/0x40 [ 320.067020][T17183] x64_sys_call+0x28cb/0x3000 [ 320.067045][T17183] do_syscall_64+0xca/0x2b0 [ 320.067084][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.067106][T17183] RIP: 0033:0x7ff846fcf749 [ 320.067119][T17183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.067155][T17183] RSP: 002b:00007ff845a36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 320.067176][T17183] RAX: ffffffffffffffda RBX: 000000000000045a RCX: 00007ff846fcf749 [ 320.067207][T17183] RDX: 00007ff845a36ef0 RSI: 0000000000000000 RDI: 00007ff847054960 [ 320.067221][T17183] RBP: 0000200000000d80 R08: 00007ff845a36bb7 R09: 00007ff845a36e40 [ 320.067280][T17183] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 320.067290][T17183] R13: 00007ff845a36ef0 R14: 00007ff845a36eb0 R15: 0000200000000000 [ 320.067383][T17183] [ 320.500497][T17209] tipc: Can't bind to reserved service type 1 [ 320.507517][T17209] siw: device registration error -23 [ 320.814915][T17221] loop4: detected capacity change from 0 to 512 [ 320.838909][T17221] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 320.868541][T17221] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.4521: inode #1792: comm syz.4.4521: iget: illegal inode # [ 320.914995][T17221] EXT4-fs (loop4): Remounting filesystem read-only [ 320.921632][T17221] EXT4-fs (loop4): no journal found [ 320.926920][T17221] EXT4-fs (loop4): can't get journal size [ 320.977420][T17221] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 321.011984][T17221] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 321.041771][T17221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.097246][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.114860][T17224] x_tables: duplicate underflow at hook 3 [ 321.174540][T17226] FAULT_INJECTION: forcing a failure. [ 321.174540][T17226] name failslab, interval 1, probability 0, space 0, times 0 [ 321.187250][T17226] CPU: 0 UID: 0 PID: 17226 Comm: syz.2.4523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.187303][T17226] Tainted: [W]=WARN [ 321.187311][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.187326][T17226] Call Trace: [ 321.187333][T17226] [ 321.187396][T17226] __dump_stack+0x1d/0x30 [ 321.187453][T17226] dump_stack_lvl+0x95/0xd0 [ 321.187477][T17226] dump_stack+0x15/0x1b [ 321.187502][T17226] should_fail_ex+0x265/0x280 [ 321.187584][T17226] should_failslab+0x8c/0xb0 [ 321.187656][T17226] kmem_cache_alloc_noprof+0x69/0x4b0 [ 321.187680][T17226] ? alloc_empty_file+0x76/0x200 [ 321.187764][T17226] alloc_empty_file+0x76/0x200 [ 321.187788][T17226] path_openat+0x63/0x23b0 [ 321.187897][T17226] ? path_openat+0x1e82/0x23b0 [ 321.187938][T17226] ? _parse_integer+0x27/0x40 [ 321.187956][T17226] ? kstrtoull+0x111/0x140 [ 321.187976][T17226] do_filp_open+0x109/0x230 [ 321.188058][T17226] do_sys_openat2+0xa6/0x150 [ 321.188108][T17226] __se_sys_openat2+0x194/0x1f0 [ 321.188144][T17226] __x64_sys_openat2+0x55/0x70 [ 321.188304][T17226] x64_sys_call+0x2c04/0x3000 [ 321.188335][T17226] do_syscall_64+0xca/0x2b0 [ 321.188404][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.188431][T17226] RIP: 0033:0x7f9aeeb1f749 [ 321.188502][T17226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.188525][T17226] RSP: 002b:00007f9aed587038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 321.188546][T17226] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1f749 [ 321.188561][T17226] RDX: 0000200000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 321.188587][T17226] RBP: 00007f9aed587090 R08: 0000000000000000 R09: 0000000000000000 [ 321.188602][T17226] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 321.188622][T17226] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 321.188642][T17226] [ 321.450569][T17236] netlink: 'syz.0.4528': attribute type 12 has an invalid length. [ 321.467198][T17235] xt_hashlimit: max too large, truncated to 1048576 [ 321.558689][T15459] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 321.567467][T15459] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.664231][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4533'. [ 321.664720][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4529'. [ 321.730520][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4529'. [ 321.739579][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4529'. [ 321.765350][T17240] loop8: detected capacity change from 0 to 128 [ 321.783859][T17240] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.796614][T17240] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.852127][T17259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 321.858784][T17259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.866303][T17259] vhci_hcd vhci_hcd.0: Device attached [ 321.921152][ T6337] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.961902][T17276] FAULT_INJECTION: forcing a failure. [ 321.961902][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.975023][T17276] CPU: 1 UID: 0 PID: 17276 Comm: syz.8.4542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.975052][T17276] Tainted: [W]=WARN [ 321.975059][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.975132][T17276] Call Trace: [ 321.975138][T17276] [ 321.975144][T17276] __dump_stack+0x1d/0x30 [ 321.975203][T17276] dump_stack_lvl+0x95/0xd0 [ 321.975225][T17276] dump_stack+0x15/0x1b [ 321.975242][T17276] should_fail_ex+0x265/0x280 [ 321.975262][T17276] should_fail+0xb/0x20 [ 321.975361][T17276] should_fail_usercopy+0x1a/0x20 [ 321.975384][T17276] _copy_from_user+0x1c/0xb0 [ 321.975407][T17276] ___sys_recvmsg+0xaa/0x370 [ 321.975478][T17276] ? _parse_integer+0x27/0x40 [ 321.975508][T17276] do_recvmmsg+0x1ef/0x540 [ 321.975548][T17276] ? fput+0x8f/0xc0 [ 321.975604][T17276] __x64_sys_recvmmsg+0xe5/0x170 [ 321.975630][T17276] x64_sys_call+0x2b75/0x3000 [ 321.975651][T17276] do_syscall_64+0xca/0x2b0 [ 321.975681][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.975715][T17276] RIP: 0033:0x7ff55d3ff749 [ 321.975727][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.975747][T17276] RSP: 002b:00007ff55be5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 321.975806][T17276] RAX: ffffffffffffffda RBX: 00007ff55d655fa0 RCX: 00007ff55d3ff749 [ 321.975821][T17276] RDX: 0000000000000300 RSI: 0000200000001640 RDI: 0000000000000007 [ 321.975909][T17276] RBP: 00007ff55be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.975924][T17276] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 321.975938][T17276] R13: 00007ff55d656038 R14: 00007ff55d655fa0 R15: 00007ffce16e4188 [ 321.975960][T17276] [ 322.266325][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 322.266338][ T29] audit: type=1400 audit(1767761699.726:20757): avc: denied { ioctl } for pid=17282 comm="syz.0.4544" path="socket:[56677]" dev="sockfs" ino=56677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.297348][ T29] audit: type=1400 audit(1767761699.726:20758): avc: denied { bind } for pid=17282 comm=77DEA305FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.316620][ T29] audit: type=1400 audit(1767761699.726:20759): avc: denied { setopt } for pid=17282 comm=77DEA305FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.336138][ T29] audit: type=1400 audit(1767761699.726:20760): avc: denied { write } for pid=17282 comm=77DEA305FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.355826][ T3402] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 322.423918][T17271] vhci_hcd: connection closed [ 322.424053][ T6416] vhci_hcd vhci_hcd.2: stop threads [ 322.434185][ T6416] vhci_hcd vhci_hcd.2: release socket [ 322.439570][ T6416] vhci_hcd vhci_hcd.2: disconnect device [ 322.460939][ T3402] usb 5-1: enqueue for inactive port 0 [ 322.466599][ T3402] usb 5-1: enqueue for inactive port 0 [ 322.472147][ T3402] usb 5-1: enqueue for inactive port 0 [ 322.538295][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 322.598899][T17288] xt_hashlimit: max too large, truncated to 1048576 [ 322.700649][ T29] audit: type=1326 audit(1767761700.156:20761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.724329][ T29] audit: type=1326 audit(1767761700.156:20762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.748030][ T29] audit: type=1326 audit(1767761700.156:20763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.771623][ T29] audit: type=1326 audit(1767761700.156:20764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.795247][ T29] audit: type=1326 audit(1767761700.156:20765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.818982][ T29] audit: type=1326 audit(1767761700.156:20766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 322.849671][T17295] loop4: detected capacity change from 0 to 8192 [ 322.923565][T17303] FAULT_INJECTION: forcing a failure. [ 322.923565][T17303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.936649][T17303] CPU: 1 UID: 0 PID: 17303 Comm: syz.2.4552 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 322.936707][T17303] Tainted: [W]=WARN [ 322.936716][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.936745][T17303] Call Trace: [ 322.936753][T17303] [ 322.936762][T17303] __dump_stack+0x1d/0x30 [ 322.936810][T17303] dump_stack_lvl+0x95/0xd0 [ 322.936831][T17303] dump_stack+0x15/0x1b [ 322.936850][T17303] should_fail_ex+0x265/0x280 [ 322.936916][T17303] should_fail+0xb/0x20 [ 322.936935][T17303] should_fail_usercopy+0x1a/0x20 [ 322.937110][T17303] _copy_to_user+0x20/0xa0 [ 322.937138][T17303] simple_read_from_buffer+0xb5/0x130 [ 322.937160][T17303] proc_fail_nth_read+0x10e/0x150 [ 322.937223][T17303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.937258][T17303] vfs_read+0x1a8/0x770 [ 322.937275][T17303] ? __rcu_read_unlock+0x4f/0x70 [ 322.937294][T17303] ? __fget_files+0x184/0x1c0 [ 322.937317][T17303] ? mutex_lock+0x58/0x90 [ 322.937352][T17303] ksys_read+0xda/0x1a0 [ 322.937376][T17303] __x64_sys_read+0x40/0x50 [ 322.937441][T17303] x64_sys_call+0x2889/0x3000 [ 322.937473][T17303] do_syscall_64+0xca/0x2b0 [ 322.937506][T17303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.937529][T17303] RIP: 0033:0x7f9aeeb1e15c [ 322.937613][T17303] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.937632][T17303] RSP: 002b:00007f9aed587030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.937653][T17303] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1e15c [ 322.937670][T17303] RDX: 000000000000000f RSI: 00007f9aed5870a0 RDI: 0000000000000004 [ 322.937686][T17303] RBP: 00007f9aed587090 R08: 0000000000000000 R09: 0000000000000000 [ 322.937777][T17303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.937794][T17303] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 322.937879][T17303] [ 322.938219][T17295] loop4: p1 p2[DM] p4 [ 323.011896][T17305] FAULT_INJECTION: forcing a failure. [ 323.011896][T17305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.014323][T17295] loop4: p1 size 196608 extends beyond EOD, [ 323.017844][T17305] CPU: 0 UID: 0 PID: 17305 Comm: syz.5.4551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.018059][T17305] Tainted: [W]=WARN [ 323.018078][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.018121][T17305] Call Trace: [ 323.018133][T17305] [ 323.018146][T17305] __dump_stack+0x1d/0x30 [ 323.018268][T17305] dump_stack_lvl+0x95/0xd0 [ 323.018331][T17305] dump_stack+0x15/0x1b [ 323.018475][T17305] should_fail_ex+0x265/0x280 [ 323.018541][T17305] should_fail_alloc_page+0xf2/0x100 [ 323.018680][T17305] __alloc_frozen_pages_noprof+0x109/0x360 [ 323.018815][T17305] alloc_pages_mpol+0xb3/0x260 [ 323.018896][T17305] folio_alloc_mpol_noprof+0x39/0x80 [ 323.018981][T17305] shmem_get_folio_gfp+0x3cf/0xd50 [ 323.019070][T17305] shmem_write_begin+0xfc/0x1f0 [ 323.019174][T17305] generic_perform_write+0x184/0x490 [ 323.019244][T17305] shmem_file_write_iter+0xc5/0xf0 [ 323.019350][T17305] iter_file_splice_write+0x66b/0xa20 [ 323.019453][T17305] ? __pfx_iter_file_splice_write+0x10/0x10 [ 323.019507][T17305] do_splice+0x972/0x10b0 [ 323.019562][T17305] ? sized_strscpy+0x193/0x1a0 [ 323.019655][T17305] ? __rcu_read_unlock+0x4f/0x70 [ 323.019791][T17305] ? __fget_files+0x184/0x1c0 [ 323.019861][T17305] __se_sys_splice+0x26c/0x3a0 [ 323.019977][T17305] __x64_sys_splice+0x78/0x90 [ 323.020036][T17305] x64_sys_call+0x2e82/0x3000 [ 323.020186][T17305] do_syscall_64+0xca/0x2b0 [ 323.020265][T17305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.020327][T17305] RIP: 0033:0x7f17107af749 [ 323.020369][T17305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.020422][T17305] RSP: 002b:00007f170f1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 323.020482][T17305] RAX: ffffffffffffffda RBX: 00007f1710a06180 RCX: 00007f17107af749 [ 323.020518][T17305] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 323.020553][T17305] RBP: 00007f170f1d5090 R08: 0000000000033fe0 R09: 0000000000000000 [ 323.020692][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.020727][T17305] R13: 00007f1710a06218 R14: 00007f1710a06180 R15: 00007ffd8bf6bce8 [ 323.020781][T17305] [ 323.379959][T17295] truncated [ 323.389302][T17295] loop4: p2 start 4292936063 is beyond EOD, truncated [ 323.396338][T17295] loop4: p4 size 50331648 extends beyond EOD, truncated [ 323.445235][T17312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4555'. [ 323.584813][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4555'. [ 323.593888][T17317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4555'. [ 323.602911][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4555'. [ 323.612215][T17317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4555'. [ 323.926751][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'. [ 324.036976][T17337] loop8: detected capacity change from 0 to 512 [ 324.044006][T17337] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 324.055219][T17337] EXT4-fs (loop8): 1 truncate cleaned up [ 324.061474][T17337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.079820][T17334] FAULT_INJECTION: forcing a failure. [ 324.079820][T17334] name failslab, interval 1, probability 0, space 0, times 0 [ 324.092639][T17334] CPU: 1 UID: 0 PID: 17334 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.092750][T17334] Tainted: [W]=WARN [ 324.092760][T17334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.092778][T17334] Call Trace: [ 324.092786][T17334] [ 324.092796][T17334] __dump_stack+0x1d/0x30 [ 324.092897][T17334] dump_stack_lvl+0x95/0xd0 [ 324.092919][T17334] dump_stack+0x15/0x1b [ 324.092943][T17334] should_fail_ex+0x265/0x280 [ 324.092971][T17334] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 324.093049][T17334] should_failslab+0x8c/0xb0 [ 324.093077][T17334] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 324.093156][T17334] ? shmem_alloc_inode+0x34/0x50 [ 324.093187][T17334] ? kstrtouint_from_user+0x9f/0xf0 [ 324.093214][T17334] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 324.093283][T17334] shmem_alloc_inode+0x34/0x50 [ 324.093314][T17334] alloc_inode+0x40/0x170 [ 324.093340][T17334] new_inode+0x1d/0xe0 [ 324.093363][T17334] shmem_get_inode+0x246/0x750 [ 324.093458][T17334] __shmem_file_setup+0x113/0x210 [ 324.093493][T17334] shmem_file_setup+0x3b/0x50 [ 324.093537][T17334] __se_sys_memfd_create+0x2f7/0x6b0 [ 324.093583][T17334] __x64_sys_memfd_create+0x31/0x40 [ 324.093674][T17334] x64_sys_call+0x28cb/0x3000 [ 324.093700][T17334] do_syscall_64+0xca/0x2b0 [ 324.093784][T17334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.093808][T17334] RIP: 0033:0x7f9aeeb1f749 [ 324.093844][T17334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.093873][T17334] RSP: 002b:00007f9aed586d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 324.093890][T17334] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f9aeeb1f749 [ 324.093900][T17334] RDX: 00007f9aed586dec RSI: 0000000000000000 RDI: 00007f9aeeba4960 [ 324.093914][T17334] RBP: 0000200000000000 R08: 00007f9aed586b07 R09: 0000000000000000 [ 324.093928][T17334] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 324.093942][T17334] R13: 00007f9aed586dec R14: 00007f9aed586df0 R15: 00007fff47b2f258 [ 324.093966][T17334] [ 324.334906][T17341] loop4: detected capacity change from 0 to 512 [ 324.341036][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.342532][T17341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.361100][T17341] EXT4-fs (loop4): 1 truncate cleaned up [ 324.367066][T17341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.410270][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.515855][T17346] loop8: detected capacity change from 0 to 512 [ 324.531102][T17346] FAT-fs (loop8): Directory bread(block 199916) failed [ 324.552807][T17346] FAT-fs (loop8): Directory bread(block 199917) failed [ 324.572204][T17346] FAT-fs (loop8): Directory bread(block 199918) failed [ 324.587318][T17346] FAT-fs (loop8): Directory bread(block 199919) failed [ 324.602008][T17346] FAT-fs (loop8): Directory bread(block 199920) failed [ 324.624407][T17346] FAT-fs (loop8): Directory bread(block 199921) failed [ 324.645690][T17346] FAT-fs (loop8): Directory bread(block 199922) failed [ 324.667432][T17346] FAT-fs (loop8): Directory bread(block 199923) failed [ 324.771015][T17350] loop4: detected capacity change from 0 to 2048 [ 324.829351][T17350] Alternate GPT is invalid, using primary GPT. [ 324.835842][T17350] loop4: p2 p3 p7 [ 326.073330][T17391] FAULT_INJECTION: forcing a failure. [ 326.073330][T17391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.086719][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.0.4583 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.086784][T17391] Tainted: [W]=WARN [ 326.086794][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.086805][T17391] Call Trace: [ 326.086810][T17391] [ 326.086815][T17391] __dump_stack+0x1d/0x30 [ 326.086835][T17391] dump_stack_lvl+0x95/0xd0 [ 326.086886][T17391] dump_stack+0x15/0x1b [ 326.086901][T17391] should_fail_ex+0x265/0x280 [ 326.086918][T17391] should_fail_alloc_page+0xf2/0x100 [ 326.086936][T17391] __alloc_frozen_pages_noprof+0x109/0x360 [ 326.087001][T17391] alloc_pages_mpol+0xb3/0x260 [ 326.087078][T17391] alloc_pages_noprof+0x90/0x130 [ 326.087108][T17391] alloc_skb_with_frags+0x193/0x470 [ 326.087131][T17391] tls_decrypt_sg+0x231/0x1a80 [ 326.087158][T17391] ? skb_copy_bits+0x52e/0x550 [ 326.087181][T17391] ? skb_copy_header+0x17b/0x1a0 [ 326.087200][T17391] ? tls_strp_msg_load+0x3d5/0x460 [ 326.087229][T17391] tls_decrypt_sw+0x4b/0x440 [ 326.087301][T17391] ? tls_rx_rec_wait+0x11f/0x5f0 [ 326.087321][T17391] tls_rx_one_record+0x118/0x820 [ 326.087380][T17391] ? __pfx_woken_wake_function+0x10/0x10 [ 326.087406][T17391] tls_sw_recvmsg+0xa5a/0x14f0 [ 326.087435][T17391] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 326.087499][T17391] inet6_recvmsg+0x16b/0x290 [ 326.087541][T17391] sock_recvmsg+0x95/0x170 [ 326.087555][T17391] __sys_recvfrom+0x122/0x1f0 [ 326.087581][T17391] __x64_sys_recvfrom+0x76/0x90 [ 326.087657][T17391] x64_sys_call+0x2918/0x3000 [ 326.087675][T17391] do_syscall_64+0xca/0x2b0 [ 326.087780][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.087824][T17391] RIP: 0033:0x7ff846fd1514 [ 326.087863][T17391] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 326.087877][T17391] RSP: 002b:00007ff845a35ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 326.087891][T17391] RAX: ffffffffffffffda RBX: 00007ff845a35fc0 RCX: 00007ff846fd1514 [ 326.087901][T17391] RDX: 0000000000001000 RSI: 00007ff845a36010 RDI: 0000000000000003 [ 326.087910][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.087919][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 326.087994][T17391] R13: 00007ff845a35f68 R14: 00007ff845a36010 R15: 0000000000000000 [ 326.088008][T17391] [ 326.375233][T17399] loop8: detected capacity change from 0 to 512 [ 326.398415][T17399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.427905][T17399] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.440028][T17399] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4586: corrupted inode contents [ 326.452176][T17399] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4586: mark_inode_dirty error [ 326.475506][T17399] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4586: corrupted inode contents [ 326.490876][T17399] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4586: mark_inode_dirty error [ 326.533798][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.704065][T17425] wireguard0: entered promiscuous mode [ 326.709712][T17425] wireguard0: entered allmulticast mode [ 326.858029][T17453] bridge0: port 3(bond0) entered blocking state [ 326.864458][T17453] bridge0: port 3(bond0) entered disabled state [ 326.879287][T17453] bond0: entered allmulticast mode [ 326.884486][T17453] bond_slave_0: entered allmulticast mode [ 326.890263][T17453] bond_slave_1: entered allmulticast mode [ 326.932447][T17453] bond0: entered promiscuous mode [ 326.937589][T17453] bond_slave_0: entered promiscuous mode [ 326.937894][T17461] __nla_validate_parse: 5 callbacks suppressed [ 326.937929][T17461] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4607'. [ 326.943548][T17453] bond_slave_1: entered promiscuous mode [ 326.980494][T17453] bridge0: port 3(bond0) entered blocking state [ 326.986936][T17453] bridge0: port 3(bond0) entered forwarding state [ 327.000792][T17465] usb usb7: usbfs: process 17465 (syz.0.4606) did not claim interface 0 before use [ 327.040000][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 327.040075][ T29] audit: type=1326 audit(1767762216.743:21516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.078637][ T29] audit: type=1326 audit(1767762216.743:21517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.102249][ T29] audit: type=1326 audit(1767762216.785:21518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.125876][ T29] audit: type=1326 audit(1767762216.785:21519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.150250][ T29] audit: type=1326 audit(1767762216.785:21520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.173826][ T29] audit: type=1326 audit(1767762216.785:21521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.197461][ T29] audit: type=1326 audit(1767762216.785:21522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.221065][ T29] audit: type=1326 audit(1767762216.869:21523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.244715][ T29] audit: type=1326 audit(1767762216.869:21524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.8.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.270089][T17470] FAULT_INJECTION: forcing a failure. [ 327.270089][T17470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.283333][T17470] CPU: 1 UID: 0 PID: 17470 Comm: syz.5.4609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 327.283367][T17470] Tainted: [W]=WARN [ 327.283392][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.283406][T17470] Call Trace: [ 327.283413][T17470] [ 327.283421][T17470] __dump_stack+0x1d/0x30 [ 327.283448][T17470] dump_stack_lvl+0x95/0xd0 [ 327.283471][T17470] dump_stack+0x15/0x1b [ 327.283488][T17470] should_fail_ex+0x265/0x280 [ 327.283583][T17470] should_fail+0xb/0x20 [ 327.283680][T17470] should_fail_usercopy+0x1a/0x20 [ 327.283722][T17470] _copy_from_user+0x1c/0xb0 [ 327.283782][T17470] proc_submiturb+0x43/0xa0 [ 327.283816][T17470] usbdev_ioctl+0xcb6/0x1700 [ 327.283842][T17470] ? __pfx_usbdev_ioctl+0x10/0x10 [ 327.283926][T17470] __se_sys_ioctl+0xce/0x140 [ 327.283961][T17470] __x64_sys_ioctl+0x43/0x50 [ 327.283994][T17470] x64_sys_call+0x14b0/0x3000 [ 327.284071][T17470] do_syscall_64+0xca/0x2b0 [ 327.284109][T17470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.284133][T17470] RIP: 0033:0x7f17107af749 [ 327.284149][T17470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.284189][T17470] RSP: 002b:00007f170f217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.284205][T17470] RAX: ffffffffffffffda RBX: 00007f1710a05fa0 RCX: 00007f17107af749 [ 327.284215][T17470] RDX: 00002000000001c0 RSI: 000000008038550a RDI: 0000000000000005 [ 327.284226][T17470] RBP: 00007f170f217090 R08: 0000000000000000 R09: 0000000000000000 [ 327.284236][T17470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.284246][T17470] R13: 00007f1710a06038 R14: 00007f1710a05fa0 R15: 00007ffd8bf6bce8 [ 327.284278][T17470] [ 327.540661][ T29] audit: type=1326 audit(1767762217.267:21525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17480 comm="syz.8.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 327.614362][T17486] loop5: detected capacity change from 512 to 64 [ 327.833926][T17500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 327.840777][T17500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.848348][T17500] vhci_hcd vhci_hcd.0: Device attached [ 328.517449][T17507] vhci_hcd: connection closed [ 328.517594][ T6335] vhci_hcd vhci_hcd.0: stop threads [ 328.517613][ T6335] vhci_hcd vhci_hcd.0: release socket [ 328.517633][ T6335] vhci_hcd vhci_hcd.0: disconnect device [ 328.915781][T17556] FAULT_INJECTION: forcing a failure. [ 328.915781][T17556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.915813][T17556] CPU: 1 UID: 0 PID: 17556 Comm: syz.2.4643 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.915855][T17556] Tainted: [W]=WARN [ 328.915861][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.915876][T17556] Call Trace: [ 328.915882][T17556] [ 328.915891][T17556] __dump_stack+0x1d/0x30 [ 328.915993][T17556] dump_stack_lvl+0x95/0xd0 [ 328.916102][T17556] dump_stack+0x15/0x1b [ 328.916194][T17556] should_fail_ex+0x265/0x280 [ 328.916309][T17556] should_fail+0xb/0x20 [ 328.916421][T17556] should_fail_usercopy+0x1a/0x20 [ 328.916552][T17556] _copy_from_user+0x1c/0xb0 [ 328.916637][T17556] ucma_resolve_ip+0x4a/0x1e0 [ 328.916727][T17556] ucma_write+0x1b3/0x250 [ 328.916812][T17556] vfs_writev+0x406/0x8b0 [ 328.916896][T17556] ? __pfx_ucma_write+0x10/0x10 [ 328.917107][T17556] do_writev+0xe7/0x210 [ 328.917198][T17556] __x64_sys_writev+0x45/0x50 [ 328.917270][T17556] x64_sys_call+0x1ba5/0x3000 [ 328.917353][T17556] do_syscall_64+0xca/0x2b0 [ 328.917543][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.917638][T17556] RIP: 0033:0x7f9aeeb1f749 [ 328.917689][T17556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.917751][T17556] RSP: 002b:00007f9aed587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 328.917807][T17556] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1f749 [ 328.917849][T17556] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 328.917890][T17556] RBP: 00007f9aed587090 R08: 0000000000000000 R09: 0000000000000000 [ 328.917932][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.917972][T17556] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 328.918036][T17556] [ 329.167775][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4647'. [ 329.169438][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4647'. [ 329.216291][T17571] loop8: detected capacity change from 0 to 128 [ 329.500796][T17594] bio_check_eod: 98 callbacks suppressed [ 329.500811][T17594] syz.8.4642: attempt to access beyond end of device [ 329.500811][T17594] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 329.583243][T17571] syz.8.4642: attempt to access beyond end of device [ 329.583243][T17571] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 329.610317][T17571] syz.8.4642: attempt to access beyond end of device [ 329.610317][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.636615][T17571] syz.8.4642: attempt to access beyond end of device [ 329.636615][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.650415][T17571] syz.8.4642: attempt to access beyond end of device [ 329.650415][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.676475][T17571] syz.8.4642: attempt to access beyond end of device [ 329.676475][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.690851][T17571] syz.8.4642: attempt to access beyond end of device [ 329.690851][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.705021][T17571] syz.8.4642: attempt to access beyond end of device [ 329.705021][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.718900][T17571] syz.8.4642: attempt to access beyond end of device [ 329.718900][T17571] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 329.807524][T17602] veth0_to_team: entered promiscuous mode [ 330.173867][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4661'. [ 330.563899][T17628] FAULT_INJECTION: forcing a failure. [ 330.563899][T17628] name failslab, interval 1, probability 0, space 0, times 0 [ 330.576723][T17628] CPU: 1 UID: 0 PID: 17628 Comm: syz.2.4668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.576751][T17628] Tainted: [W]=WARN [ 330.576759][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.576773][T17628] Call Trace: [ 330.576778][T17628] [ 330.576785][T17628] __dump_stack+0x1d/0x30 [ 330.576805][T17628] dump_stack_lvl+0x95/0xd0 [ 330.576903][T17628] dump_stack+0x15/0x1b [ 330.576920][T17628] should_fail_ex+0x265/0x280 [ 330.576940][T17628] should_failslab+0x8c/0xb0 [ 330.576959][T17628] kmem_cache_alloc_noprof+0x69/0x4b0 [ 330.576977][T17628] ? audit_log_start+0x342/0x720 [ 330.577036][T17628] audit_log_start+0x342/0x720 [ 330.577061][T17628] audit_seccomp+0x48/0x100 [ 330.577088][T17628] ? __seccomp_filter+0x832/0x1260 [ 330.577112][T17628] __seccomp_filter+0x843/0x1260 [ 330.577199][T17628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 330.577230][T17628] ? vfs_write+0x7e8/0x960 [ 330.577249][T17628] ? __rcu_read_unlock+0x4f/0x70 [ 330.577352][T17628] __secure_computing+0x82/0x150 [ 330.577382][T17628] syscall_trace_enter+0xcf/0x1e0 [ 330.577408][T17628] do_syscall_64+0xa4/0x2b0 [ 330.577452][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.577475][T17628] RIP: 0033:0x7f9aeeb1e15c [ 330.577549][T17628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 330.577570][T17628] RSP: 002b:00007f9aed587030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.577591][T17628] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1e15c [ 330.577605][T17628] RDX: 000000000000000f RSI: 00007f9aed5870a0 RDI: 0000000000000003 [ 330.577619][T17628] RBP: 00007f9aed587090 R08: 0000000000000000 R09: 0000000000000000 [ 330.577633][T17628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.577724][T17628] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 330.577790][T17628] [ 331.313796][T17647] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4673'. [ 331.533570][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'. [ 331.545059][T17657] program syz.8.4676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.560642][T17656] vlan3: entered promiscuous mode [ 331.649791][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.658491][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.833583][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 331.833595][ T29] audit: type=1326 audit(1767762989.772:21979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.864480][ T29] audit: type=1326 audit(1767762989.814:21980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.888246][ T29] audit: type=1326 audit(1767762989.814:21981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.911876][ T29] audit: type=1326 audit(1767762989.814:21982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.935458][ T29] audit: type=1326 audit(1767762989.814:21983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.959563][ T29] audit: type=1326 audit(1767762989.867:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 331.983220][ T29] audit: type=1326 audit(1767762989.867:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 332.006807][ T29] audit: type=1326 audit(1767762989.867:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 332.030379][ T29] audit: type=1326 audit(1767762989.867:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 332.053960][ T29] audit: type=1326 audit(1767762989.867:21988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.5.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 332.062424][T17686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4687'. [ 332.111904][T17686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4687'. [ 332.119272][T17688] bond0: left allmulticast mode [ 332.125842][T17688] bond_slave_0: left allmulticast mode [ 332.131425][T17688] bond_slave_1: left allmulticast mode [ 332.137211][T17688] bridge0: port 3(bond0) entered disabled state [ 332.161881][T17691] loop4: detected capacity change from 0 to 764 [ 332.169563][T17691] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 332.179868][T17691] FAULT_INJECTION: forcing a failure. [ 332.179868][T17691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.179900][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.4.4689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.179933][T17691] Tainted: [W]=WARN [ 332.179941][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.180025][T17691] Call Trace: [ 332.180032][T17691] [ 332.180040][T17691] __dump_stack+0x1d/0x30 [ 332.180138][T17691] dump_stack_lvl+0x95/0xd0 [ 332.180243][T17691] dump_stack+0x15/0x1b [ 332.180265][T17691] should_fail_ex+0x265/0x280 [ 332.180290][T17691] should_fail+0xb/0x20 [ 332.180356][T17691] should_fail_usercopy+0x1a/0x20 [ 332.180381][T17691] strncpy_from_user+0x27/0x260 [ 332.180419][T17691] getname_flags+0xae/0x3b0 [ 332.180584][T17691] do_sys_openat2+0x60/0x150 [ 332.180679][T17691] __x64_sys_openat+0xf2/0x120 [ 332.180758][T17691] x64_sys_call+0x2b07/0x3000 [ 332.180836][T17691] do_syscall_64+0xca/0x2b0 [ 332.180933][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.180994][T17691] RIP: 0033:0x7f17da5ef749 [ 332.181031][T17691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.181082][T17691] RSP: 002b:00007f17d9057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.181135][T17691] RAX: ffffffffffffffda RBX: 00007f17da845fa0 RCX: 00007f17da5ef749 [ 332.181170][T17691] RDX: 000000000000a041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 332.181215][T17691] RBP: 00007f17d9057090 R08: 0000000000000000 R09: 0000000000000000 [ 332.181249][T17691] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 332.181283][T17691] R13: 00007f17da846038 R14: 00007f17da845fa0 R15: 00007ffc27541068 [ 332.181330][T17691] [ 332.255985][T17688] bridge_slave_0: left promiscuous mode [ 332.262179][T17695] netlink: 'syz.4.4691': attribute type 13 has an invalid length. [ 332.266698][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.321569][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4691'. [ 332.404464][T17688] bridge_slave_1: left allmulticast mode [ 332.404484][T17688] bridge_slave_1: left promiscuous mode [ 332.404908][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.454741][T17688] bond0: (slave bond_slave_0): Releasing backup interface [ 332.455719][T17688] bond_slave_0: left promiscuous mode [ 332.470107][T17688] bond0: (slave bond_slave_1): Releasing backup interface [ 332.471213][T17688] bond_slave_1: left promiscuous mode [ 332.487326][T17688] team0: Port device team_slave_0 removed [ 332.495785][T17688] team0: Port device team_slave_1 removed [ 332.496918][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.496931][T17688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.509258][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.525500][T17688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.539674][T17688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.609578][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.609749][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.693881][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.696667][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.759751][ T6352] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.768329][ T6352] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.768397][ T6352] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.768431][ T6352] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.822243][T17717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.830824][T17717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.840478][T17717] netlink: 'syz.5.4698': attribute type 10 has an invalid length. [ 332.852818][T17717] team0: Port device dummy0 added [ 332.859108][T17717] netlink: 'syz.5.4698': attribute type 10 has an invalid length. [ 332.870325][T17717] team0: Port device dummy0 removed [ 332.877925][T17717] dummy0: entered promiscuous mode [ 332.883603][T17717] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 333.424022][T17729] loop8: detected capacity change from 0 to 512 [ 333.437561][T17729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.450293][T17729] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.462537][T17729] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4703: corrupted inode contents [ 333.474627][T17729] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4703: mark_inode_dirty error [ 333.486294][T17729] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4703: corrupted inode contents [ 333.498438][T17729] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4703: mark_inode_dirty error [ 333.531508][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.622569][T17750] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 333.640649][T17755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4711'. [ 333.660083][T17755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4711'. [ 333.699079][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'. [ 333.864627][T17762] veth0_to_team: entered promiscuous mode [ 334.076749][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 334.502741][T17790] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 334.509513][T17790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.517103][T17790] vhci_hcd vhci_hcd.0: Device attached [ 334.535812][T17798] FAULT_INJECTION: forcing a failure. [ 334.535812][T17798] name failslab, interval 1, probability 0, space 0, times 0 [ 334.548521][T17798] CPU: 0 UID: 0 PID: 17798 Comm: syz.8.4726 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.548599][T17798] Tainted: [W]=WARN [ 334.548608][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.548622][T17798] Call Trace: [ 334.548628][T17798] [ 334.548634][T17798] __dump_stack+0x1d/0x30 [ 334.548654][T17798] dump_stack_lvl+0x95/0xd0 [ 334.548674][T17798] dump_stack+0x15/0x1b [ 334.548690][T17798] should_fail_ex+0x265/0x280 [ 334.548784][T17798] should_failslab+0x8c/0xb0 [ 334.548832][T17798] kmem_cache_alloc_noprof+0x69/0x4b0 [ 334.548853][T17798] ? skb_clone+0x151/0x1f0 [ 334.548883][T17798] skb_clone+0x151/0x1f0 [ 334.548906][T17798] __netlink_deliver_tap+0x2c9/0x500 [ 334.548998][T17798] netlink_unicast+0x66b/0x690 [ 334.549023][T17798] netlink_sendmsg+0x58b/0x6b0 [ 334.549052][T17798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.549164][T17798] __sock_sendmsg+0x145/0x180 [ 334.549185][T17798] ____sys_sendmsg+0x31e/0x4a0 [ 334.549285][T17798] ___sys_sendmsg+0x17b/0x1d0 [ 334.549323][T17798] __x64_sys_sendmsg+0xd4/0x160 [ 334.549445][T17798] x64_sys_call+0x17ba/0x3000 [ 334.549538][T17798] do_syscall_64+0xca/0x2b0 [ 334.549613][T17798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.549631][T17798] RIP: 0033:0x7ff55d3ff749 [ 334.549643][T17798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.549662][T17798] RSP: 002b:00007ff55be5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.549772][T17798] RAX: ffffffffffffffda RBX: 00007ff55d655fa0 RCX: 00007ff55d3ff749 [ 334.549855][T17798] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 334.549867][T17798] RBP: 00007ff55be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.549878][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.549888][T17798] R13: 00007ff55d656038 R14: 00007ff55d655fa0 R15: 00007ffce16e4188 [ 334.549907][T17798] [ 334.797685][ T3402] usb 11-1: new low-speed USB device number 4 using vhci_hcd [ 334.825506][T17806] loop8: detected capacity change from 0 to 512 [ 334.847568][T17806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.870173][T17806] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.887845][T17806] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4729: corrupted inode contents [ 334.899942][T17806] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4729: mark_inode_dirty error [ 334.911594][T17806] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4729: corrupted inode contents [ 334.935393][T17806] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4729: mark_inode_dirty error [ 334.983434][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.150569][T17825] xt_hashlimit: max too large, truncated to 1048576 [ 335.167898][T17795] vhci_hcd: connection reset by peer [ 335.183148][ T6447] vhci_hcd vhci_hcd.5: stop threads [ 335.188607][ T6447] vhci_hcd vhci_hcd.5: release socket [ 335.194186][ T6447] vhci_hcd vhci_hcd.5: disconnect device [ 335.201295][T17827] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4736'. [ 335.306905][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4738'. [ 335.497730][T17840] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 335.497730][T17840] program syz.8.4740 not setting count and/or reply_len properly [ 335.606695][T17845] loop8: detected capacity change from 0 to 256 [ 335.645993][T17845] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.684907][T17849] loop4: detected capacity change from 0 to 512 [ 335.693120][T17845] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.737225][T17849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.753644][T17849] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.789462][T17849] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4744: corrupted inode contents [ 335.807542][T17849] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4744: mark_inode_dirty error [ 335.828118][T17849] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4744: corrupted inode contents [ 335.840376][T17849] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4744: mark_inode_dirty error [ 335.875803][T17873] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4752'. [ 335.885636][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.931441][T17881] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 335.965047][T17882] loop8: detected capacity change from 0 to 8192 [ 336.003722][T17882] loop8: detected capacity change from 0 to 1024 [ 336.025167][T17886] bridge_slave_1: left allmulticast mode [ 336.030995][T17886] bridge_slave_1: left promiscuous mode [ 336.036790][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.056528][T17882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.075219][T17886] bridge_slave_0: left allmulticast mode [ 336.080998][T17886] bridge_slave_0: left promiscuous mode [ 336.086789][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.109825][T17883] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 336.116447][T17883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.123994][T17883] vhci_hcd vhci_hcd.0: Device attached [ 336.268744][T17894] loop4: detected capacity change from 0 to 512 [ 336.304089][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.304857][T17894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.341372][T17894] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.360011][T17894] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4759: corrupted inode contents [ 336.379251][T17894] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4759: mark_inode_dirty error [ 336.392963][T17894] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4759: corrupted inode contents [ 336.425246][T17894] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4759: mark_inode_dirty error [ 336.507084][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.712280][T17890] vhci_hcd: connection closed [ 336.712615][ T6447] vhci_hcd vhci_hcd.5: stop threads [ 336.722675][ T6447] vhci_hcd vhci_hcd.5: release socket [ 336.728111][ T6447] vhci_hcd vhci_hcd.5: disconnect device [ 336.737299][T17911] loop8: detected capacity change from 0 to 512 [ 336.771730][T17911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.806248][T17909] FAULT_INJECTION: forcing a failure. [ 336.806248][T17909] name failslab, interval 1, probability 0, space 0, times 0 [ 336.817674][T17911] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.819077][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.0.4763 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.819158][T17909] Tainted: [W]=WARN [ 336.819182][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.819235][T17909] Call Trace: [ 336.819253][T17909] [ 336.819277][T17909] __dump_stack+0x1d/0x30 [ 336.819342][T17909] dump_stack_lvl+0x95/0xd0 [ 336.819454][T17909] dump_stack+0x15/0x1b [ 336.819514][T17909] should_fail_ex+0x265/0x280 [ 336.819584][T17909] should_failslab+0x8c/0xb0 [ 336.819646][T17909] kmem_cache_alloc_noprof+0x69/0x4b0 [ 336.819721][T17909] ? getname_flags+0x80/0x3b0 [ 336.819861][T17909] getname_flags+0x80/0x3b0 [ 336.819977][T17909] do_sys_openat2+0x60/0x150 [ 336.820131][T17909] __x64_sys_openat+0xf2/0x120 [ 336.820271][T17909] x64_sys_call+0x2b07/0x3000 [ 336.820343][T17909] do_syscall_64+0xca/0x2b0 [ 336.820468][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.820529][T17909] RIP: 0033:0x7ff846fcf749 [ 336.820566][T17909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.820682][T17909] RSP: 002b:00007ff845a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.820802][T17909] RAX: ffffffffffffffda RBX: 00007ff847225fa0 RCX: 00007ff846fcf749 [ 336.820837][T17909] RDX: 0000000000028000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 336.820875][T17909] RBP: 00007ff845a37090 R08: 0000000000000000 R09: 0000000000000000 [ 336.820911][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.820946][T17909] R13: 00007ff847226038 R14: 00007ff847225fa0 R15: 00007ffeedb7dbc8 [ 336.820999][T17909] [ 336.999176][T17911] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4764: corrupted inode contents [ 337.011120][T17911] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4764: mark_inode_dirty error [ 337.022581][T17911] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4764: corrupted inode contents [ 337.034515][T17911] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4764: mark_inode_dirty error [ 337.046976][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 337.046988][ T29] audit: type=1326 audit(2000000001.543:22552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.103269][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.126671][T17922] loop4: detected capacity change from 0 to 512 [ 337.134163][ T29] audit: type=1326 audit(2000000001.574:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.157890][ T29] audit: type=1326 audit(2000000001.574:22554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.173844][T17922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 337.181493][ T29] audit: type=1326 audit(2000000001.574:22555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.214948][ T29] audit: type=1326 audit(2000000001.574:22556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.238570][ T29] audit: type=1326 audit(2000000001.574:22557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.262158][ T29] audit: type=1326 audit(2000000001.574:22558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.285738][ T29] audit: type=1326 audit(2000000001.574:22559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.309314][ T29] audit: type=1326 audit(2000000001.574:22560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.324598][T17922] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4765: inode has both inline data and extents flags [ 337.332980][ T29] audit: type=1326 audit(2000000001.574:22561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.8.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55d3ff749 code=0x7ffc0000 [ 337.346461][T17922] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4765: couldn't read orphan inode 15 (err -117) [ 337.382161][T17922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.436622][T17932] __nla_validate_parse: 4 callbacks suppressed [ 337.436638][T17932] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4769'. [ 337.452904][T17922] Cannot find del_set index 286 as target [ 337.476410][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.243894][T17970] netlink: 'syz.2.4784': attribute type 2 has an invalid length. [ 338.252029][T17970] netlink: 'syz.2.4784': attribute type 3 has an invalid length. [ 338.259791][T17970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4784'. [ 338.364240][T17985] lo speed is unknown, defaulting to 1000 [ 338.420105][T17989] loop4: detected capacity change from 0 to 1024 [ 338.421124][T17989] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 338.437629][T17989] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 338.439235][T17989] JBD2: no valid journal superblock found [ 338.452980][T17989] EXT4-fs (loop4): Could not load journal inode [ 338.463301][T17989] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 338.498686][T17995] xt_hashlimit: max too large, truncated to 1048576 [ 338.511418][T17994] lo speed is unknown, defaulting to 1000 [ 338.575023][T17998] lo speed is unknown, defaulting to 1000 [ 338.895667][T18012] ip6t_rpfilter: unknown options [ 338.897237][T18015] loop8: detected capacity change from 0 to 512 [ 338.917415][T18015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.917467][T18015] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.918813][T18015] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4800: corrupted inode contents [ 338.918993][T18015] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4800: mark_inode_dirty error [ 338.919166][T18015] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4800: corrupted inode contents [ 338.919485][T18015] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4800: mark_inode_dirty error [ 338.967455][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.106767][T18026] sd 0:0:1:0: device reset [ 339.159435][T18028] loop8: detected capacity change from 0 to 2048 [ 339.199632][T18028] loop8: p1 < > p4 [ 339.204206][T18028] loop8: p4 size 722688 extends beyond EOD, truncated [ 339.418966][T18043] loop8: detected capacity change from 0 to 1024 [ 339.435621][T18043] EXT4-fs: Ignoring removed bh option [ 339.454093][T18047] loop4: detected capacity change from 0 to 512 [ 339.469884][T18047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.483342][T18043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.497963][T18047] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.521210][T18047] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4813: corrupted inode contents [ 339.538814][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.548610][T18047] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4813: mark_inode_dirty error [ 339.572195][T18047] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4813: corrupted inode contents [ 339.584221][T18047] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4813: mark_inode_dirty error [ 339.596575][T18058] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.616506][ T3402] usb 11-1: enqueue for inactive port 0 [ 339.627829][ T3402] usb 11-1: enqueue for inactive port 0 [ 339.633619][T18059] FAULT_INJECTION: forcing a failure. [ 339.633619][T18059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.646733][T18059] CPU: 0 UID: 0 PID: 18059 Comm: syz.8.4816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.646829][T18059] Tainted: [W]=WARN [ 339.646837][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.646851][T18059] Call Trace: [ 339.646858][T18059] [ 339.646866][T18059] __dump_stack+0x1d/0x30 [ 339.646891][T18059] dump_stack_lvl+0x95/0xd0 [ 339.646915][T18059] dump_stack+0x15/0x1b [ 339.647013][T18059] should_fail_ex+0x265/0x280 [ 339.647110][T18059] should_fail+0xb/0x20 [ 339.647131][T18059] should_fail_usercopy+0x1a/0x20 [ 339.647157][T18059] _copy_from_user+0x1c/0xb0 [ 339.647184][T18059] ___sys_sendmsg+0xc1/0x1d0 [ 339.647250][T18059] __x64_sys_sendmsg+0xd4/0x160 [ 339.647277][T18059] x64_sys_call+0x17ba/0x3000 [ 339.647307][T18059] do_syscall_64+0xca/0x2b0 [ 339.647383][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.647402][T18059] RIP: 0033:0x7ff55d3ff749 [ 339.647417][T18059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.647492][T18059] RSP: 002b:00007ff55be3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.647513][T18059] RAX: ffffffffffffffda RBX: 00007ff55d656090 RCX: 00007ff55d3ff749 [ 339.647527][T18059] RDX: 000000002004c8c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 339.647538][T18059] RBP: 00007ff55be3e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.647549][T18059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.647562][T18059] R13: 00007ff55d656128 R14: 00007ff55d656090 R15: 00007ffce16e4188 [ 339.647584][T18059] [ 339.713397][ T3402] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 339.826466][T18058] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.847433][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.888492][T18065] netlink: 'syz.0.4819': attribute type 16 has an invalid length. [ 339.889961][T18065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4819'. [ 339.924922][T18058] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.963635][T18067] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.976963][T18058] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.994129][T18067] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.013804][T18067] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.034096][ T6335] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.037454][ T6335] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.040666][ T6335] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.043922][ T6335] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.056224][T18067] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.130930][ T6335] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.134919][ T6335] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.138399][ T6335] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.150104][ T6335] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.836977][ C0] EXT4-fs (loop5): error count since last fsck: 5 [ 388.843551][ C0] EXT4-fs (loop5): last error at time 1767758903: ext4_lookup:1789: inode 2 [ 393.688520][T18102] loop4: detected capacity change from 0 to 128 [ 393.752845][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 393.752861][ T29] audit: type=1400 audit(2000000061.077:23105): avc: denied { read } for pid=18106 comm="syz.0.4835" path="socket:[60132]" dev="sockfs" ino=60132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.799128][ T29] audit: type=1400 audit(2000000061.119:23106): avc: denied { relabelfrom } for pid=18106 comm="syz.0.4835" name="" dev="pipefs" ino=59196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 393.855311][T18113] sctp: [Deprecated]: syz.8.4837 (pid 18113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.855311][T18113] Use struct sctp_sack_info instead [ 393.855443][ T29] audit: type=1400 audit(2000000061.171:23107): avc: denied { getopt } for pid=18112 comm="syz.8.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.855952][ T29] audit: type=1400 audit(2000000061.171:23108): avc: denied { listen } for pid=18112 comm="syz.8.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.858480][ T29] audit: type=1326 audit(2000000061.182:23109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.2.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 393.943650][ T29] audit: type=1326 audit(2000000061.203:23110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.0.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff846fcf749 code=0x7ffc0000 [ 393.943707][ T29] audit: type=1326 audit(2000000061.203:23111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.0.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff846fcf749 code=0x7ffc0000 [ 393.943730][ T29] audit: type=1326 audit(2000000061.224:23112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.0.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff846fcf749 code=0x7ffc0000 [ 393.943795][ T29] audit: type=1326 audit(2000000061.224:23113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.0.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff846fcf749 code=0x7ffc0000 [ 393.943891][ T29] audit: type=1326 audit(2000000061.224:23114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.0.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff846fcf749 code=0x7ffc0000 [ 394.234629][T18124] loop8: detected capacity change from 0 to 256 [ 394.340049][T18127] lo speed is unknown, defaulting to 1000 [ 394.645964][T18133] loop8: detected capacity change from 0 to 512 [ 394.684369][T18133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.684429][T18133] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.693185][T18133] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4844: corrupted inode contents [ 394.719443][T18133] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4844: mark_inode_dirty error [ 394.731131][T18133] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4844: corrupted inode contents [ 394.731413][T18133] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4844: mark_inode_dirty error [ 394.779824][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.802455][T18145] loop8: detected capacity change from 0 to 512 [ 394.831695][T18145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.845262][T18145] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.943879][T18145] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4846: corrupted inode contents [ 394.956101][T18145] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4846: mark_inode_dirty error [ 394.968532][T18145] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4846: corrupted inode contents [ 394.988782][T18145] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4846: mark_inode_dirty error [ 395.042242][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.139243][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4849'. [ 395.167416][T18152] ip6gre1: entered allmulticast mode [ 395.215790][T18148] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 395.222484][T18148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.222546][T18148] vhci_hcd vhci_hcd.0: Device attached [ 395.734809][ T3535] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 395.882922][T18158] vhci_hcd: connection reset by peer [ 396.038625][ T6357] vhci_hcd vhci_hcd.2: stop threads [ 396.043966][ T6357] vhci_hcd vhci_hcd.2: release socket [ 396.049437][ T6357] vhci_hcd vhci_hcd.2: disconnect device [ 396.400272][T18175] loop8: detected capacity change from 0 to 8192 [ 396.455069][T18175] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 396.455237][T18175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 396.455271][T18175] vhci_hcd vhci_hcd.0: Device attached [ 396.499392][T18178] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.522428][T18182] loop4: detected capacity change from 0 to 512 [ 396.529647][T18182] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.540932][T18182] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4856: corrupted xattr entries [ 396.552570][T18182] EXT4-fs (loop4): Remounting filesystem read-only [ 396.559211][T18182] EXT4-fs (loop4): 1 truncate cleaned up [ 396.565568][T18182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.578199][T18182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.703362][T18192] loop4: detected capacity change from 0 to 512 [ 396.710570][T18192] EXT4-fs: Ignoring removed oldalloc option [ 396.721008][T18192] EXT4-fs: Ignoring removed i_version option [ 396.727168][T18192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.742679][T18192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.753802][T18192] EXT4-fs (loop4): 1 truncate cleaned up [ 396.759961][T18192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.761954][ T3389] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 396.925809][T18179] vhci_hcd: connection reset by peer [ 396.935591][ T6357] vhci_hcd vhci_hcd.8: stop threads [ 396.940873][ T6357] vhci_hcd vhci_hcd.8: release socket [ 396.946288][ T6357] vhci_hcd vhci_hcd.8: disconnect device [ 397.003302][T18203] lo speed is unknown, defaulting to 1000 [ 397.488904][T15548] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 397.496842][T15548] FAT-fs (loop8): Filesystem has been set read-only [ 397.549039][T18215] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 397.580481][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.650183][T18219] netlink: 'syz.4.4868': attribute type 30 has an invalid length. [ 397.711180][T18221] loop8: detected capacity change from 0 to 1024 [ 397.743761][T18219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18219 comm=syz.4.4868 [ 397.775087][T18221] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 397.874896][T18226] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.337406][T18242] loop8: detected capacity change from 0 to 512 [ 398.448881][T18242] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 398.477757][T18242] EXT4-fs (loop8): 1 truncate cleaned up [ 398.484547][T18242] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.567927][T18242] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.4877'. [ 398.680761][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.721657][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 398.721670][ T29] audit: type=1326 audit(2000000322.285:23417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.827958][ T29] audit: type=1326 audit(2000000322.327:23418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.851635][ T29] audit: type=1326 audit(2000000322.327:23419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.875360][ T29] audit: type=1326 audit(2000000322.327:23420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.899159][ T29] audit: type=1326 audit(2000000322.327:23421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.922942][ T29] audit: type=1326 audit(2000000322.327:23422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.946527][ T29] audit: type=1326 audit(2000000322.327:23423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.970284][ T29] audit: type=1326 audit(2000000322.327:23424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 398.993876][ T29] audit: type=1326 audit(2000000322.327:23425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 399.017417][ T29] audit: type=1326 audit(2000000322.327:23426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da5ef749 code=0x7ffc0000 [ 399.146816][T18262] loop4: detected capacity change from 0 to 128 [ 399.165532][T18262] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.198258][T18262] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.255580][T18268] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4885'. [ 399.265686][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4885'. [ 399.334549][T18272] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 399.345209][T18272] vhci_hcd vhci_hcd.2: invalid port number 96 [ 399.351391][T18272] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 399.372276][T18254] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 399.378998][T18254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.386551][T18254] vhci_hcd vhci_hcd.0: Device attached [ 399.564552][T18274] vhci_hcd: connection closed [ 399.564816][ T6447] vhci_hcd vhci_hcd.2: stop threads [ 399.574762][ T6447] vhci_hcd vhci_hcd.2: release socket [ 399.580155][ T6447] vhci_hcd vhci_hcd.2: disconnect device [ 399.868148][T15260] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.035631][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4891'. [ 400.044840][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4891'. [ 400.067824][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 400.144163][T18300] sd 0:0:1:0: device reset [ 400.259236][T18317] netlink: 'syz.8.4895': attribute type 4 has an invalid length. [ 400.321147][T18326] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4899'. [ 400.330212][T18326] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4899'. [ 400.538094][T18328] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 400.544818][T18328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.552429][T18328] vhci_hcd vhci_hcd.0: Device attached [ 400.797671][T18376] loop8: detected capacity change from 0 to 512 [ 400.831935][T18362] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 400.838678][T18362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.846263][T18362] vhci_hcd vhci_hcd.0: Device attached [ 400.862145][T18376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.897409][T18376] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.009987][T18376] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4907: corrupted inode contents [ 401.051069][T18376] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4907: mark_inode_dirty error [ 401.083028][T18376] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4907: corrupted inode contents [ 401.096068][ T3402] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 401.126419][T18376] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4907: mark_inode_dirty error [ 401.141127][T18346] vhci_hcd: connection reset by peer [ 401.156621][ T6337] vhci_hcd vhci_hcd.2: stop threads [ 401.161965][ T6337] vhci_hcd vhci_hcd.2: release socket [ 401.167491][ T6337] vhci_hcd vhci_hcd.2: disconnect device [ 401.173320][ T3535] usb 5-1: enqueue for inactive port 0 [ 401.179039][ T3535] usb 5-1: enqueue for inactive port 0 [ 401.217521][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.257972][ T3535] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 401.321341][T18415] loop8: detected capacity change from 0 to 512 [ 401.345642][T18415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.370110][T18415] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.384254][T18415] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4910: corrupted inode contents [ 401.396245][T18415] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.4910: mark_inode_dirty error [ 401.408023][T18415] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.4910: corrupted inode contents [ 401.420243][T18415] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4910: mark_inode_dirty error [ 401.464729][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.480183][T18380] vhci_hcd: connection reset by peer [ 401.487210][ T6337] vhci_hcd vhci_hcd.5: stop threads [ 401.492509][ T6337] vhci_hcd vhci_hcd.5: release socket [ 401.498017][ T6337] vhci_hcd vhci_hcd.5: disconnect device [ 401.643152][T18437] lo speed is unknown, defaulting to 1000 [ 401.654314][ T3389] usb 17-1: enqueue for inactive port 0 [ 401.672305][ T3389] usb 17-1: enqueue for inactive port 0 [ 401.753532][ T3389] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 402.579045][T18501] loop4: detected capacity change from 0 to 512 [ 402.679784][T18501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.708029][T18501] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.755619][T18501] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4920: corrupted inode contents [ 402.808679][T18501] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4920: mark_inode_dirty error [ 402.849640][T18501] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4920: corrupted inode contents [ 402.903644][T18501] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4920: mark_inode_dirty error [ 403.028913][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.119412][T18529] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4928'. [ 403.141218][T18529] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4928'. [ 403.224558][T18530] loop8: detected capacity change from 0 to 8192 [ 403.304959][T18540] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 403.311678][T18540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.319342][T18540] vhci_hcd vhci_hcd.0: Device attached [ 403.532156][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 403.532172][ T29] audit: type=1326 audit(2000001351.205:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.562065][ T29] audit: type=1326 audit(2000001351.205:24115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.585743][ T29] audit: type=1326 audit(2000001351.205:24116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.609310][ T29] audit: type=1326 audit(2000001351.205:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.632857][ T29] audit: type=1326 audit(2000001351.205:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.656549][ T29] audit: type=1326 audit(2000001351.205:24119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.680102][ T29] audit: type=1326 audit(2000001351.205:24120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.703820][ T29] audit: type=1326 audit(2000001351.216:24121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.727484][ T29] audit: type=1326 audit(2000001351.216:24122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 403.751102][ T29] audit: type=1326 audit(2000001351.216:24123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff847002005 code=0x7ffc0000 [ 404.053903][ T3389] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 404.161652][T18542] vhci_hcd: connection reset by peer [ 404.169440][ T6335] vhci_hcd vhci_hcd.8: stop threads [ 404.174707][ T6335] vhci_hcd vhci_hcd.8: release socket [ 404.180211][ T6335] vhci_hcd vhci_hcd.8: disconnect device [ 404.234806][T18566] FAULT_INJECTION: forcing a failure. [ 404.234806][T18566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.247953][T18566] CPU: 1 UID: 0 PID: 18566 Comm: syz.0.4939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 404.247981][T18566] Tainted: [W]=WARN [ 404.247986][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.248000][T18566] Call Trace: [ 404.248008][T18566] [ 404.248016][T18566] __dump_stack+0x1d/0x30 [ 404.248085][T18566] dump_stack_lvl+0x95/0xd0 [ 404.248173][T18566] dump_stack+0x15/0x1b [ 404.248195][T18566] should_fail_ex+0x265/0x280 [ 404.248220][T18566] should_fail+0xb/0x20 [ 404.248241][T18566] should_fail_usercopy+0x1a/0x20 [ 404.248285][T18566] _copy_from_user+0x1c/0xb0 [ 404.248340][T18566] restore_altstack+0x4b/0x2d0 [ 404.248358][T18566] ? __set_task_blocked+0x23a/0x2a0 [ 404.248394][T18566] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 404.248472][T18566] ? arch_do_signal_or_restart+0x2c3/0x450 [ 404.248505][T18566] ? exit_to_user_mode_loop+0xf1/0x740 [ 404.248552][T18566] ? __rcu_read_unlock+0x4f/0x70 [ 404.248655][T18566] x64_sys_call+0x274a/0x3000 [ 404.248678][T18566] do_syscall_64+0xca/0x2b0 [ 404.248707][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.248781][T18566] RIP: 0033:0x7ff846f6b829 [ 404.248797][T18566] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 404.248817][T18566] RSP: 002b:00007ff845a36a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 404.248837][T18566] RAX: ffffffffffffffda RBX: 00007ff847225fa0 RCX: 00007ff846f6b829 [ 404.248848][T18566] RDX: 00007ff845a36a80 RSI: 00007ff845a36bb0 RDI: 0000000000000021 [ 404.248906][T18566] RBP: 00007ff845a37090 R08: 0000000000000000 R09: 0000000000000000 [ 404.248920][T18566] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 404.248933][T18566] R13: 00007ff847226038 R14: 00007ff847225fa0 R15: 00007ffeedb7dbc8 [ 404.248954][T18566] [ 404.560875][T18570] lo speed is unknown, defaulting to 1000 [ 404.660620][T15548] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 404.668535][T15548] FAT-fs (loop8): Filesystem has been set read-only [ 404.708329][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4943'. [ 404.724072][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4943'. [ 404.757126][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4943'. [ 404.824657][T18582] __nla_validate_parse: 2 callbacks suppressed [ 404.824672][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4943'. [ 404.875413][T18589] syz.8.4945: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 404.890061][T18589] CPU: 1 UID: 0 PID: 18589 Comm: syz.8.4945 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 404.890156][T18589] Tainted: [W]=WARN [ 404.890162][T18589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.890172][T18589] Call Trace: [ 404.890176][T18589] [ 404.890182][T18589] __dump_stack+0x1d/0x30 [ 404.890214][T18589] dump_stack_lvl+0x95/0xd0 [ 404.890232][T18589] dump_stack+0x15/0x1b [ 404.890247][T18589] warn_alloc+0x12b/0x1a0 [ 404.890267][T18589] ? __schedule+0x85f/0xcd0 [ 404.890353][T18589] ? __rcu_read_unlock+0x4f/0x70 [ 404.890369][T18589] __vmalloc_node_range_noprof+0xa0/0x1310 [ 404.890389][T18589] ? __futex_wait+0x1fa/0x260 [ 404.890429][T18589] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.890533][T18589] ? __rcu_read_unlock+0x4f/0x70 [ 404.890553][T18589] ? avc_has_perm_noaudit+0xab/0x130 [ 404.890580][T18589] ? should_fail_ex+0x30/0x280 [ 404.890596][T18589] ? should_failslab+0x8c/0xb0 [ 404.890613][T18589] vmalloc_user_noprof+0x7d/0xb0 [ 404.890692][T18589] ? xskq_create+0x80/0xe0 [ 404.890765][T18589] xskq_create+0x80/0xe0 [ 404.890791][T18589] xsk_init_queue+0x95/0xf0 [ 404.890854][T18589] xsk_setsockopt+0x3f5/0x640 [ 404.890927][T18589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 404.890960][T18589] __sys_setsockopt+0x184/0x200 [ 404.890983][T18589] __x64_sys_setsockopt+0x64/0x80 [ 404.891050][T18589] x64_sys_call+0x21d5/0x3000 [ 404.891079][T18589] do_syscall_64+0xca/0x2b0 [ 404.891160][T18589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.891178][T18589] RIP: 0033:0x7ff55d3ff749 [ 404.891190][T18589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.891204][T18589] RSP: 002b:00007ff55be5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 404.891218][T18589] RAX: ffffffffffffffda RBX: 00007ff55d655fa0 RCX: 00007ff55d3ff749 [ 404.891228][T18589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 404.891266][T18589] RBP: 00007ff55d483f91 R08: 0000000000000004 R09: 0000000000000000 [ 404.891276][T18589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.891351][T18589] R13: 00007ff55d656038 R14: 00007ff55d655fa0 R15: 00007ffce16e4188 [ 404.891422][T18589] [ 404.891427][T18589] Mem-Info: [ 405.117343][T18589] active_anon:10146 inactive_anon:2 isolated_anon:0 [ 405.117343][T18589] active_file:24439 inactive_file:2749 isolated_file:0 [ 405.117343][T18589] unevictable:18444 dirty:355 writeback:1 [ 405.117343][T18589] slab_reclaimable:3635 slab_unreclaimable:46521 [ 405.117343][T18589] mapped:33310 shmem:5336 pagetables:1562 [ 405.117343][T18589] sec_pagetables:0 bounce:0 [ 405.117343][T18589] kernel_misc_reclaimable:0 [ 405.117343][T18589] free:1811098 free_pcp:9750 free_cma:0 [ 405.162776][T18589] Node 0 active_anon:40584kB inactive_anon:8kB active_file:97756kB inactive_file:10996kB unevictable:73776kB isolated(anon):0kB isolated(file):0kB mapped:133240kB dirty:1420kB writeback:4kB shmem:21344kB kernel_stack:4768kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.190645][T18589] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.220288][T18589] lowmem_reserve[]: 0 2880 7859 7859 [ 405.225689][T18589] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 405.257075][T18589] lowmem_reserve[]: 0 0 4978 4978 [ 405.262147][T18589] Node 0 Normal free:4283148kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40584kB inactive_anon:8kB active_file:97756kB inactive_file:10996kB unevictable:73776kB writepending:1424kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35252kB local_pcp:13804kB free_cma:0kB [ 405.295598][T18589] lowmem_reserve[]: 0 0 0 0 [ 405.300227][T18589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.313039][T18589] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 405.329223][T18589] Node 0 Normal: 1962*4kB (UME) 1213*8kB (UME) 810*16kB (UME) 1115*32kB (UM) 820*64kB (UME) 595*128kB (UME) 383*256kB (UME) 317*512kB (UME) 240*1024kB (UM) 207*2048kB (UME) 771*4096kB (UM) = 4282896kB [ 405.349266][T18589] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 405.358664][T18589] 48931 total pagecache pages [ 405.363440][T18589] 23 pages in swap cache [ 405.367710][T18589] Free swap = 124340kB [ 405.371875][T18589] Total swap = 124996kB [ 405.376046][T18589] 2097051 pages RAM [ 405.379874][T18589] 0 pages HighMem/MovableOnly [ 405.384669][T18589] 81272 pages reserved [ 405.414243][T18601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4947'. [ 405.430013][T18603] loop4: detected capacity change from 0 to 512 [ 405.437889][T18601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4947'. [ 405.452352][T18603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.477020][T18603] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.506595][T18603] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4948: corrupted inode contents [ 405.518730][T18603] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4948: mark_inode_dirty error [ 405.531236][T18603] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4948: corrupted inode contents [ 405.543445][T18603] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4948: mark_inode_dirty error [ 405.561673][T18608] loop8: detected capacity change from 0 to 1024 [ 405.611799][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4950'. [ 405.637807][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.657267][T18608] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4949: Failed to acquire dquot type 0 [ 405.680350][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.696699][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.706420][T18608] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 405.733286][T18608] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #13: comm syz.8.4949: corrupted inode contents [ 405.746256][T18608] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #13: comm syz.8.4949: mark_inode_dirty error [ 405.757764][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.766985][T18608] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #13: comm syz.8.4949: corrupted inode contents [ 405.835049][T18608] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4949: mark_inode_dirty error [ 405.844344][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.862374][T18635] loop4: detected capacity change from 0 to 512 [ 405.869618][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.897012][T18608] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #13: comm syz.8.4949: corrupted inode contents [ 405.912708][ T3402] usb 11-1: enqueue for inactive port 0 [ 405.931159][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 405.935762][ T3402] usb 11-1: enqueue for inactive port 0 [ 405.946358][T18608] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 405.959361][T18608] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #13: comm syz.8.4949: corrupted inode contents [ 405.971786][T18635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.992490][T18635] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.015086][T18635] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4955: corrupted inode contents [ 406.027471][ T3402] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 406.038109][T18648] FAULT_INJECTION: forcing a failure. [ 406.038109][T18648] name failslab, interval 1, probability 0, space 0, times 0 [ 406.050847][T18648] CPU: 1 UID: 0 PID: 18648 Comm: syz.2.4958 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 406.050880][T18648] Tainted: [W]=WARN [ 406.050889][T18648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.050904][T18648] Call Trace: [ 406.050911][T18648] [ 406.050919][T18648] __dump_stack+0x1d/0x30 [ 406.050946][T18648] dump_stack_lvl+0x95/0xd0 [ 406.051014][T18648] dump_stack+0x15/0x1b [ 406.051103][T18648] should_fail_ex+0x265/0x280 [ 406.051134][T18648] should_failslab+0x8c/0xb0 [ 406.051232][T18648] kmem_cache_alloc_noprof+0x69/0x4b0 [ 406.051251][T18648] ? getname_flags+0x80/0x3b0 [ 406.051272][T18648] getname_flags+0x80/0x3b0 [ 406.051297][T18648] path_setxattrat+0x223/0x310 [ 406.051369][T18648] __x64_sys_lsetxattr+0x71/0x90 [ 406.051390][T18648] x64_sys_call+0x2ef0/0x3000 [ 406.051469][T18648] do_syscall_64+0xca/0x2b0 [ 406.051506][T18648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.051525][T18648] RIP: 0033:0x7f9aeeb1f749 [ 406.051564][T18648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.051584][T18648] RSP: 002b:00007f9aed566038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 406.051605][T18648] RAX: ffffffffffffffda RBX: 00007f9aeed76090 RCX: 00007f9aeeb1f749 [ 406.051618][T18648] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000200000000300 [ 406.051701][T18648] RBP: 00007f9aed566090 R08: 0000000000000000 R09: 0000000000000000 [ 406.051716][T18648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.051729][T18648] R13: 00007f9aeed76128 R14: 00007f9aeed76090 R15: 00007fff47b2f258 [ 406.051750][T18648] [ 406.052291][T18608] EXT4-fs error (device loop8): ext4_truncate:4635: inode #13: comm syz.8.4949: mark_inode_dirty error [ 406.081552][T18635] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4955: mark_inode_dirty error [ 406.107023][T18608] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 406.153838][T18635] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4955: corrupted inode contents [ 406.171454][T18608] EXT4-fs (loop8): 1 truncate cleaned up [ 406.217469][T18635] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4955: mark_inode_dirty error [ 406.265303][T18608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.335882][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.348272][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.501421][T18674] lo speed is unknown, defaulting to 1000 [ 406.535062][T18670] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 406.541698][T18670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.549315][T18670] vhci_hcd vhci_hcd.0: Device attached [ 406.607983][T18687] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 406.621047][T18686] netlink: get zone limit has 8 unknown bytes [ 406.645279][T18686] tipc: Started in network mode [ 406.650260][T18686] tipc: Node identity 7a767c45bee3, cluster identity 4711 [ 406.657427][T18686] tipc: Enabled bearer , priority 0 [ 407.160282][T18678] vhci_hcd: connection reset by peer [ 407.169659][T18732] SELinux: policydb version 1953507643 does not match my version range 15-35 [ 407.184837][ T6330] vhci_hcd vhci_hcd.5: stop threads [ 407.190151][ T6330] vhci_hcd vhci_hcd.5: release socket [ 407.195592][ T6330] vhci_hcd vhci_hcd.5: disconnect device [ 407.207805][T18732] SELinux: failed to load policy [ 407.291645][T18744] FAULT_INJECTION: forcing a failure. [ 407.291645][T18744] name failslab, interval 1, probability 0, space 0, times 0 [ 407.304296][T18744] CPU: 1 UID: 0 PID: 18744 Comm: syz.2.4987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 407.304332][T18744] Tainted: [W]=WARN [ 407.304340][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.304355][T18744] Call Trace: [ 407.304363][T18744] [ 407.304371][T18744] __dump_stack+0x1d/0x30 [ 407.304398][T18744] dump_stack_lvl+0x95/0xd0 [ 407.304424][T18744] dump_stack+0x15/0x1b [ 407.304442][T18744] should_fail_ex+0x265/0x280 [ 407.304464][T18744] should_failslab+0x8c/0xb0 [ 407.304484][T18744] kmem_cache_alloc_noprof+0x69/0x4b0 [ 407.304506][T18744] ? vm_area_dup+0x33/0x2c0 [ 407.304533][T18744] vm_area_dup+0x33/0x2c0 [ 407.304560][T18744] __split_vma+0xe9/0x660 [ 407.304588][T18744] vms_gather_munmap_vmas+0x17a/0x7b0 [ 407.304624][T18744] ? vma_iter_store_new+0x1c5/0x200 [ 407.304643][T18744] ? vma_link+0x1d5/0x220 [ 407.304678][T18744] do_vmi_align_munmap+0x1ac/0x3d0 [ 407.304727][T18744] do_vmi_munmap+0x1db/0x220 [ 407.304763][T18744] move_vma+0x9cb/0xcf0 [ 407.304795][T18744] mremap_to+0x3d8/0x430 [ 407.304813][T18744] ? check_prep_vma+0x5d6/0x660 [ 407.304839][T18744] __se_sys_mremap+0x632/0xb30 [ 407.304872][T18744] ? mutex_unlock+0x4f/0x90 [ 407.304895][T18744] ? fput+0x8f/0xc0 [ 407.304920][T18744] ? ksys_write+0x192/0x1a0 [ 407.304942][T18744] __x64_sys_mremap+0x67/0x80 [ 407.304966][T18744] x64_sys_call+0x2944/0x3000 [ 407.305000][T18744] do_syscall_64+0xca/0x2b0 [ 407.305038][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.305057][T18744] RIP: 0033:0x7f9aeeb1f749 [ 407.305070][T18744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.305090][T18744] RSP: 002b:00007f9aed587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 407.305111][T18744] RAX: ffffffffffffffda RBX: 00007f9aeed75fa0 RCX: 00007f9aeeb1f749 [ 407.305125][T18744] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 407.305138][T18744] RBP: 00007f9aed587090 R08: 0000200000000000 R09: 0000000000000000 [ 407.305150][T18744] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 407.305163][T18744] R13: 00007f9aeed76038 R14: 00007f9aeed75fa0 R15: 00007fff47b2f258 [ 407.305181][T18744] [ 407.640267][T15459] tipc: Node number set to 3298131013 [ 407.725493][T18769] loop8: detected capacity change from 0 to 1024 [ 407.748651][T18768] lo speed is unknown, defaulting to 1000 [ 407.779831][T18769] EXT4-fs: Ignoring removed bh option [ 407.788081][T18769] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 407.835340][T18769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.319100][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 408.319116][ T29] audit: type=1326 audit(2000001612.360:24622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18760 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 408.355831][ T29] audit: type=1326 audit(2000001612.360:24623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18760 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17107af749 code=0x7ffc0000 [ 408.538117][ T29] audit: type=1326 audit(2000001612.591:24624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.561784][ T29] audit: type=1326 audit(2000001612.591:24625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.585473][ T29] audit: type=1326 audit(2000001612.591:24626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.609189][ T29] audit: type=1326 audit(2000001612.591:24627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.632726][ T29] audit: type=1326 audit(2000001612.591:24628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.656341][ T29] audit: type=1326 audit(2000001612.591:24629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.679822][ T29] audit: type=1326 audit(2000001612.591:24630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.703393][ T29] audit: type=1326 audit(2000001612.591:24631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeeb1f749 code=0x7ffc0000 [ 408.878545][ T3389] usb 17-1: enqueue for inactive port 0 [ 408.885323][ T3389] usb 17-1: enqueue for inactive port 0 [ 408.939617][T18817] loop4: detected capacity change from 0 to 8192 [ 408.956851][ T3389] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 408.983570][T18809] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 408.990238][T18809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.997991][T18809] vhci_hcd vhci_hcd.0: Device attached [ 409.129630][T18817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 409.136314][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.143865][T18817] vhci_hcd vhci_hcd.0: Device attached [ 409.571374][T18820] vhci_hcd: connection closed [ 409.571571][ T6416] vhci_hcd vhci_hcd.0: stop threads [ 409.581659][ T6416] vhci_hcd vhci_hcd.0: release socket [ 409.587066][ T6416] vhci_hcd vhci_hcd.0: disconnect device [ 409.663920][T18828] vhci_hcd: connection closed [ 409.664393][ T6416] vhci_hcd vhci_hcd.4: stop threads [ 409.674492][ T6416] vhci_hcd vhci_hcd.4: release socket [ 409.679904][ T6416] vhci_hcd vhci_hcd.4: disconnect device [ 409.756481][T18845] lo speed is unknown, defaulting to 1000 [ 410.248546][T15260] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 410.256742][T15260] FAT-fs (loop4): Filesystem has been set read-only [ 410.287471][T18853] lo speed is unknown, defaulting to 1000 [ 410.356537][T18851] bridge0: port 3(gretap0) entered blocking state [ 410.363027][T18851] bridge0: port 3(gretap0) entered disabled state [ 410.370708][T18851] gretap0: entered allmulticast mode [ 410.391678][T18851] gretap0: entered promiscuous mode [ 410.419967][T18851] bridge0: port 3(gretap0) entered blocking state [ 410.426622][T18851] bridge0: port 3(gretap0) entered forwarding state [ 410.452028][T18855] lo speed is unknown, defaulting to 1000 [ 410.519859][T18858] loop4: detected capacity change from 0 to 8192 [ 410.549681][T15548] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.613596][T18873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 410.620226][T18873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.627808][T18873] vhci_hcd vhci_hcd.0: Device attached [ 410.651383][T18872] loop8: detected capacity change from 0 to 128 [ 410.675499][T18872] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 410.684872][T18882] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 410.701623][T18872] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 410.771459][T18889] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 410.778076][T18889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.785993][T18889] vhci_hcd vhci_hcd.0: Device attached [ 410.793663][T18890] vhci_hcd: connection closed [ 410.793905][ T6416] vhci_hcd vhci_hcd.2: stop threads [ 410.803831][ T6416] vhci_hcd vhci_hcd.2: release socket [ 410.809267][ T6416] vhci_hcd vhci_hcd.2: disconnect device [ 410.965447][T18892] ================================================================== [ 410.973633][T18892] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 410.981648][T18892] [ 410.983989][T18892] write to 0xffff88811b4a6314 of 4 bytes by task 18893 on cpu 1: [ 410.991707][T18892] xas_set_mark+0x12b/0x140 [ 410.996233][T18892] tag_pages_for_writeback+0xc2/0x290 [ 411.001634][T18892] writeback_iter+0x340/0x820 [ 411.006336][T18892] mpage_writepages+0x87/0x1250 [ 411.011214][T18892] fat_writepages+0x24/0x30 [ 411.015740][T18892] do_writepages+0x1c6/0x310 [ 411.020350][T18892] file_write_and_wait_range+0x156/0x2c0 [ 411.026003][T18892] __generic_file_fsync+0x46/0x160 [ 411.031126][T18892] fat_file_fsync+0x49/0x100 [ 411.035732][T18892] vfs_fsync_range+0x10d/0x130 [ 411.040519][T18892] generic_file_write_iter+0x1b8/0x2f0 [ 411.046000][T18892] iter_file_splice_write+0x66b/0xa20 [ 411.051412][T18892] direct_splice_actor+0x156/0x2a0 [ 411.056553][T18892] splice_direct_to_actor+0x312/0x680 [ 411.061945][T18892] do_splice_direct+0xda/0x150 [ 411.066729][T18892] do_sendfile+0x380/0x650 [ 411.071164][T18892] __x64_sys_sendfile64+0x105/0x150 [ 411.076376][T18892] x64_sys_call+0x2db1/0x3000 [ 411.081066][T18892] do_syscall_64+0xca/0x2b0 [ 411.085600][T18892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.091541][T18892] [ 411.093877][T18892] read to 0xffff88811b4a6314 of 4 bytes by task 18892 on cpu 0: [ 411.101513][T18892] file_write_and_wait_range+0x10e/0x2c0 [ 411.107169][T18892] __generic_file_fsync+0x46/0x160 [ 411.111954][T18874] vhci_hcd: connection closed [ 411.112287][T18892] fat_file_fsync+0x49/0x100 [ 411.121567][T18892] vfs_fsync_range+0x10d/0x130 [ 411.126345][T18892] generic_file_write_iter+0x1b8/0x2f0 [ 411.131824][T18892] iter_file_splice_write+0x66b/0xa20 [ 411.137203][T18892] direct_splice_actor+0x156/0x2a0 [ 411.142330][T18892] splice_direct_to_actor+0x312/0x680 [ 411.147705][T18892] do_splice_direct+0xda/0x150 [ 411.152477][T18892] do_sendfile+0x380/0x650 [ 411.156902][T18892] __x64_sys_sendfile64+0x105/0x150 [ 411.162105][T18892] x64_sys_call+0x2db1/0x3000 [ 411.166799][T18892] do_syscall_64+0xca/0x2b0 [ 411.171331][T18892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.177232][T18892] [ 411.179566][T18892] value changed: 0x02000021 -> 0x04000021 [ 411.185283][T18892] [ 411.187620][T18892] Reported by Kernel Concurrency Sanitizer on: [ 411.193771][T18892] CPU: 0 UID: 0 PID: 18892 Comm: syz.8.5027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.205146][T18892] Tainted: [W]=WARN [ 411.208974][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.219123][T18892] ================================================================== [ 411.227507][ T6335] vhci_hcd vhci_hcd.4: stop threads [ 411.232791][ T6335] vhci_hcd vhci_hcd.4: release socket [ 411.238238][ T6335] vhci_hcd vhci_hcd.4: disconnect device [ 411.460350][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.727123][T15260] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 411.735048][T15260] FAT-fs (loop4): Filesystem has been set read-only [ 411.926697][ T3402] usb 11-1: enqueue for inactive port 0 [ 411.932426][ T3402] usb 11-1: enqueue for inactive port 0 [ 412.003634][ T3402] vhci_hcd vhci_hcd.5: vhci_device speed not set